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Abstract 

The characterization of second-order type isomorphisms is a purely syntactical 
problem that we propose to study under the enlightenment of game semantics. We 
study this question in the case of second-order Afi-calculus, which can be seen as 
an extension of system F to classical logic, and for which we define a categorical 
framework: control hyperdoctrines. 

Our game model of A/i-calculus is based on polymorphic arenas (closely related 
to Hughes' hyperforests) which evolve during the play (following the ideas of 
Murawski-Ong). We show that type isomorphisms coincide with the "equality" on 
arenas associated with types. Finally we deduce the equational characterization 
of type isomorphisms from this equality. We also recover from the same model 
Roberto Di Cosmo's characterization of type isomorphisms for system F. 

This approach leads to a geometrical comprehension on the question of second 
order type isomorphisms, which can be easily extended to some other polymorphic 
calculi including additional programming features. 
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1 Introduction 



Denotational semantics Defining a semantic for a language is a funda- 
mental tool for understanding the way this language works. Thus, semantics 
is a very active domain of research in theoretical computer science: in par- 
ticular, there has been an important investigation on semantics which could 
modelize a language as precisely as possible; this has led to the emergence 
of game semantics in the early 90s, whose success is due to the deep adequa- 
tion of its models with the syntax. The present work illustrates the ability of 
game semantics to modelize a language precisely: consequently, it is possi- 
ble to extract from the model some properties of the language. So, this work 
has to be understood as an example of accomplishment of the original goal 
of denotational semantics: using abstract tools to prove concrete properties 
on a programming language. In this article, the property we extract con- 
cerns a non-trivial problem, the characterization of type isomorphisms for 
second-order languages. 



Type isomorphisms. The problem of type isomorphisms is a syntactical 
question: two types A and B are isomorphic (A - B) if there exist two terms 
f : A ^ B and g : B ^ A such that f o g = ids and g ° f = idA- This 
equivalence relation on data types allows to translate a program from one 
type to the other without any change on the calculatory meaning of the 
program. Thus, a search in a library up to type isomorphism will help the 
programmer to find all the functions that can potentially serve his purpose, 
and to reuse them in the new typing context This is particularly 

appealing with functional languages, because in this case the type can really 
be seen as a partial specification of the program: such a library search up 
to isomorphisms has been implemented in particular for Caml Light by 
Jerome Vouillon. It can also be use d in p roof assistants to help finding 
proofs in libraries and reusing them iIbpoiI] ( for mo re details on the use of 
type isomorphisms in computer science, see | DC95|l ). 



When dealing with type isomorphisms, the key problem, given a program- 
ming language, is to find a characterization of isomorphic types through 
an equational system. This can be done either syntactically (by working 
directly on terms) or semantically (by using an adequate model of the cal- 
culus, i.e. such that there are no more isomorphisms in the model than in 
the language). For the A-c alculus, the problem has been solved semantically 
as early as in 1981 |Sol83|1 , but Olivier Lauren t has recently proposed a new 
approach based on game semantics llLauOSll : taking the usual HON game 
model for A-calculus (which we call the propositional game model), he proved 
that the equality modulo isomorphism in the syntax corresponds to the no- 
tion of equality between forests, and proved the equational characterization 
of isomorphisms by this means. The main steps of his proof are summed up 
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iso in the A-calculus 

u: B ^ A 
t o u — ids 
not — idA 



game model 
at-.A*^ B* 
au-.B*^ A* 
au] (Jt — ids* 



isomorphic arenas 
A* and B* identical 



A 



~, B 



Fig. 1. Steps of the proof of Olivier Laurent in his work on type isomorphisms 

on figure 1. The advantage of this point of view is that it immediately gave 
him a characterization of type isomorphisms for the A/,i -calculus, requiring 
no additional work. 

AjU2-calculus. The calculus we consider in this work is the call-by-name 
disjunctive second-order A u-calcu lus (shortly, AjU2). The A/j-calculus has 



been introduced by Parigot |Par92|1 as a way to add the notion of control to 
A-calculus, and hence to associate a calculus to classical logic. There are a 
call-by-value version and a call-by-name version o f this calculus, that Peter 



Selinger proved to be isomorphic one to the other ISelOlf l. The Afi2-calculus 
is just an extension of this calculus to second order: here we will consider a 
Church-style presentation of second-order terms. 

As far as we know, the characterization of type isomorphisms for A/i2 has not 
been don e yet. H owever, using the results of Roberto Di Cosmo concerning 



system F |DC95|1 and of Olivier Laurent concerning the A/j-calculus [LauOSO, 
one can suggest that the equational system that characterizes type isomor- 
phisms for A/.i2 is the system presented on figure 2 (note that we have 
now an equality corresponding the interaction between V and ^). We pro- 
pose in this paper a semantic demonstration of this result, in the spirit of 
the work of Olivier Laurent. 

Categorical models for A[i2. The first part of this work is dedicated to 
the description of a categorical structure which generates models of A/.i2. 
This construction is essentially a mix b etween the structure of hyperdoc- 



trines, introduced by Lawvere ||Law7O0, which have been proved to be a 



categorical rnodel of system F, and the control categories, invented by Pe- 



ter Selinger |Sel01|1 to give a categorical characterization of models of the 
A/,i-calculus. The only points that require more caution are at the interface 
between the two structures, i.e. at the interaction between the functor Tlj 
that models quantification in a hyperdoctrine and the binoidal functor ^ of 
control categories. 

Game semantics. Models of second order calculi do not come about easily 
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AxB^.BxA AXT A MX.MY.A "^YMXA 

A X (B X C) (A X B) X C VX.T T VX.(A x B) VX.A x VX.B 

A ^ (B ^ C) ^£ (A X B) ^ C T ^ A A A^B^.B^A 
{A ^ B)^ C A ^ {B^ C) A ^ T T A ^ (B ^ C) (A ^ B) ^ C 
(AxB)^C (A^C) x(B^C) T^A^.T 

± ^ A A 

A ^ VX.B VX(A ^ B) if X does not appear free in A 

Fig. 2. Equational system for type isomorphisms in Ay.! 

due to impredicativity. Among the different possibilities, we choose mod- 
els based on game semantics because of their high degree of adequation 
with the syntax: indeed, game semantics has been widely used to construc t 
fully c omple te models for var ious ca lculi, such as PCF iATMOd. iHoooh . 



jUPCF ||Lai97l] , Idealized Algol [|AM99l] , etc. This means that this semantics 



gives a very faithful description of the behavior of the syntax modulo re- 
duction rules in the system. And this is precisely what we need to deal 
semantically with type isomorphisms: a model which is so precise that it 
contains no more isomorphisms than the syntax. 

The first ga me mod el of system F was a complete HON-style game model 
by Hughes jHugOdl from which we inherit the notion of hyperforests (i.e. 



forests with more structure); unfortunately the complex mechanism for 
interaction in this model prevents us from calculating isomorphisms ef- 
ficiently. Murawski and Ong developed an alternative rnodel (for afftne 



polymorphism) based on the notion of evolving games |MO01[] : we will 
reuse this idea in the context of a HON-style game. Finally, Abramsky and 
Jagadeesan built a model dedicated to generic polymorphism iIatosIi . and 
thus their model is not appropriate for our objectives. 

The model. The second part of this paper presents polymorphic arenas 
and strategies on these arenas: polymorphic arenas are forests with a precise 
structure for nodes that make them very closed to second-order formulas. 
A structure of hyperforest can be extracted from these arenas (however, 
note that hyperforests are not the basic structure used to define arenas). 
The notion of move in a polymorphic arena is more sophisticated than in 
propositional game semantics, but these moves carry all the second-order 
structure, so that the definitions of plays, views, strategies, etc, will not 
change. 

We prove that we have obtained a model for A/j2 by using the tools defined in 
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iso in Ayu2 

u: B ^ A 
t o u — ids 
uot — id A 
\ 

A 



~, B 



game model 
at-.A*^ B* 
au-B* ^ A* 
au, cFt — ids* 
at; au — idA* 



uniform model 
at and cr^ uniform 



isomorphic arenas 
A* and B* identical 



Fig. 3. Steps of our demonstration 

the first part. In this model, the two players O and P have a very symmetrical 
behavior, so that interaction is easy to define. But this symmetry is paid by 
the fact that this model, being very liberal, is far from being complete (which 
is not a problem by itself in our perspective), and in particular it has too 
many isomorphisms compared to our language. 

Uniformity. That is w hy we a dd a new property for strategies, uniformity 
(also inspired partly by | MOOll] ), which breaks this symmetry between play- 



ers and gives raise to a sub-model (which is also far from being complete, 
but we do not care for that) where the isomorphisms will happen to have 
exactly the same form as in Aft2: uniformity is just an ad hoc property, 
precisely defined to retrieve exactly A/,i2 isomorphisms. 

The core theorem of our work on isomorphisms consists in proving that, 
in the uniform model, the existence of a game isomorphism between two 
polymorphic arenas (A -g B) induces that these two arenas are equal in the 
most natural sense (A B). Then we can conclude on the characterization 
of type isomorphisms: if we denote A* the interpretation of a type A in the 
uniform model, then we have: 

A ^ B ^ A* -g B* ^ A* -a B* ^ A B 



The main steps of this reasoning are summed up on figure 3. As an easy 
corollary of this result, one is able to retrieve the characterization of type 
isomorphi sms fo r Church-style system F, proved syntactically by Roberto 
Di Cosmo |DC95|l . Moreover, the results can also be extended easily to some 
little extensions of the calculus, like a calculus with a fixpoint operator. 
Finally, the geometrical aspect of this work leads us to an interesting remark: 
hyperforests, which naturally carry the equivalence corresponding to type 
isomorphisms, happen to be a very significant description of second-order 
formulas. 
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2 Control hyperdoctrines 



2.1 The second-order A ^-calculus 



The Curry-Howard correspondence, illustrated for intuitionistic logic by the 
simply typed A -calcul us, cari be extended to classical logic through Michel 



Parigot's A/.i-calculus |Par92[ 1. It adds new operators to the A-calculus, in 
order to enable the notion of control. Hence, the calculus allows to use the 
output as if it was sent to many outputs, which correspond to the sequents 
with several conclusions of classical logic. As an example, the well-known 
control command call/cc and its semantics can be encoded in the A/j- 
calculus. There are two different paradigms, which differ in the reduction 
rules of the control operators: t he call -by-name and the call-by-value A/,i- 



calculi. Peter Selinger proved in ISelOll] that these two calculi are dual 



Here we consider the second-order extension of this calculus, in a call- 
by-name paradigm, and with the disjunction type introduced by Selinger 



in ||SelOl|]. This system will be called Aft2 in the rest of the paper. 



The grammar of types is the following: 



A = T| ±1 XI AxAl A^A \ A^A I VX.A 



The grammar of terms is: 



t::=x\ ★ I {t,t) I 7ii(0 I 712(0 I I ^^^-i I [^1^]^ I y-Oi^-i 
I [a,p\t I ii{a^,f).t I AX.t I t[A] 

The variables a will be called names. If [a\t appears in the scope of a y-a^ it 
will be called a bound name; if not it is a free name; the set of free names of 
a term t will be denoted by FN{t). The set of free term variables (resp. free 
type variables) appearing in a term is denoted FV{t) (resp. FTV{t)). 

In order to control the free type variables appearing in a sequent, we intro- 
duce the enabling judgement X ih A: it expresses the fact that the free type 
variables of a type A are chosen among Xi, . . . , X„, and it is defined by the 
following inference rules: 

XeX 

X Ih X X Ih T X Ih ± 
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XihA XihB XihA XihB XihA X ih B 



Xih A^B Xih AxB Xih A^B 

jC,X Ih A 
X Ih VXA 

The sequents of our calculus take the form X; F h ^ : A | A where t is the term, 
A is the type, F is a context for variables (a sequence of typing assignments 
X, : Aj, where is a variable that appears at most once in F), A is a context for 
names (a set of typing assignments «, : A,, where is a name that appears 
at most once in A) and X is a set of type variables. The typing rules are: 

XihAi ... XihA„ XihBi ... XihBp 

(ax) 



X; xi : Ai, . . . , x„ : An h Xi : A,- 1 ai : Bi, . . . , : Bp 
X Ih F X Ih A 



(T) 
H I) 

H E)- 



X;F h ★ : T I A 

X;F,x : A h f : B I A 
X;Fh Ax^^: A^B| A 

X;Fh^:A^B|A X;FhH:A|A 



(XI) 



X;F \-tu:B\A 
X;Fhi:A|A X;Fhu:B|A 



X; F h (^, u) : A X B I A 



(xEl) ^;rh^:AxB|A ^^^^^ X;T h t : AxB \ A 



X;Fh7Ti(0:A|A X; F h 712(0 : B I A 

/ • 1 ^ X;T h ^ : A I A . ^ . 

(nammg rule) -^-^ if « : A G A 

X; F h [a]t : ±\A 

, 1 , X; F h f : ± I a : A, A 
(u-rule) — 5 ■ — 

X;Fhfta^.^:A|A 

(double naming rule) ^ ^ • ^ ^ ^ I ^ Ha: A,^:B e A 

X;F h \a,f>\t : ± I A 

X;Fhi:±|a:A,|S:B,A 



(double /.i-rule) 



X;Fh;u(a^n.i:A^B|A 
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(V7) 



X,X;T\-t:A\A 
X;r h AX.t : VX.A | A 

X;ri-^:yX.A|A 



(VE) 



if X ^ FTV{T) U f Ty(A) 



Xlh B 



X;r h t{B}:A[B/X] \ A 



Finally, the equational theory of AjU2 is defined by the sequents X;T \- t = 
u : A \ A (with X;T \- t : A \ A and X;T \- u : A \ A) generated by congruence 
relations that can be classified as follows: 



A-calculus with products: 




t = ★ 


T 


ni{{u,v)) = u 


A 


n2{{u,v)) = V 


B 


{ni{u), Jiziu)) = u 


AxB 


(Ax^-Ow = t[u/x] 


B 


Ax^.tx = t 


A^B 



((T)) 
((Til)) 

(X) 

(^) 

if X ^ FV{t) (?]) 



AjU -calculus with disjunction: 



mina^^^^^t) = i[[^]^K-)/[«](-)] 
[M{^a^^'.t) = t[[li,y]{-)/[a]{-)] 



: B if^iFN{t,u) 

: Ai if |S ^ FN{t) 

: ± (fi^) 

: A[B/X] if |6 ^ FN{t) 



[a'lfia^i = t[a'/a] 
[^]t = t 



± 



if 5 : ± 6 A 



^(«^|6«).[«,|6]f = f 



A iiaiFN{t) (0f') 

A^B if«,|6^fN(0 {d"^) 



Second order quantification: 

(AX.O{B} = t[B/X] 
AX.t{X} = t 



A[B/X] 
VXA 



if X ^ Fry(o (7]2) 
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In the above relations, the contextual substitution Sa,c{M) - M[C{-)/[a]{-)] 
where M is a term, t i— > C{t) is an operation on terms and a : A appears in 
the name context, has to be defined by induction on M: 

. Sa,c{[a]M) = C{[a]Sa,c{M)) 

• s«,c([«,i6]M) = C(fia'^.[a,|6]s„,c(M)) 

• s«,c([iS,«]M) = C{^a^.[^,a]Sa,cm) 

• Sa,c commutes with all other base operations on terms (with the require- 
ment to avoid captures). 

Now that the system A[^2 is completely defined, one can give the definition 
of a type isomorphism: 

Definition 1 (type isomorphism) Let A and B be two types o/A/j2. We say that 
there is a type isomorphism between A and B if there exist two terms t and u such 
that: 

• X; h i : A ^ B I 

• X; h w : B ^ A I 

• Ax^.t{ux) = Ax^.x 

• Ay^.u{ty) = Ay^.y 



2.2 Definition of a control hyperdoctrine 



We wish to give a categorical model of A/i2. For this we use t wo ingre 



dients : first, the notion of hyperdoc trine, i ntroduced by Lawvere ILawTOO, 



with which Seely |See87|1 and Pitts llPit88l] have proposed a catego rical in 



terpretation of system F; second, the notion of control category |Sel01[] , which 
introduces a disjunction ^ to characterize models of the A/i-calculus. We 
chose to give preference to control categories rather than categories of con- 
tinuations, because using continuation categories would require to build a 
CPS-translation transforming the connector V into the connector 3, and to 
build a theory for categories of continuations with the connector 3: as our 
model is based on the interpretation of the connector V, we did not choose 
this option. 

In the following definition, CCC is the category of cartesian closed categories 
with strict morphisms of ccc's (G : C — > D is a strict morphism if the 
specified cartesian closed structure of C is sent to the specified cartesian 
closed structure of D). 

Definition 2 (hyperdoctrine) An hyperdoctrine H is specified by: 
• a base category |H| with terminal object T and binary products 
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• a distinguished object U in |H| such that for all I G |H| there exists n G N 
such that I = U" (with the convention W = T); we denote : U" ^ U the 
projection on the ith component, and uun = n\^^ x . . . x n"„^^ : U"'^^ — > U" 

• a functor F : \H\°p — > CCC such that if we compose F with the forgetful functor 
fff: CCC Set we obtain the functor |H|(-, U) 

• for each I G |H|, a functor Ylj : F{I xU) —> F{I) such that : 

■ Hi is right adjoint to the functor F{nixu) '■ — > F{I x U) 

■ Hi is natural in I: for any a : I ^ J, F{a) oTlj = Ylio F{a x 

• for any a : I ^ },for any object A ofF{} x U), the morphism {F{a) o Tlj){A) — > 
(III o F{a X idu)){A) generated by the adjunction is the identity. 

The functors F{C), with C object of\H\°P, are called the specialization functors. 

The intuitions of such a categorical description are the following: the objects 
(resp. the morphisms) of F{W) will correspond to the types (resp. the terms) 
where each free type variable that appears is chosen between Xi,. . .,X„. 
Hence, f (ttjxu) '■ FQ) x is simply the standard way to make the 

number of free type variables growing: thus we will often address this func- 
tor as - I— > {~)\^'^- ri/ makes this number of free type variables decreasing 
by quantifying one of them. 

We adopt the following notations for a cartesian closed category: : A ^ 1 
is the terminal arrow, tti, 7x2 are the two projections, (/, g) is for pairing, b '■ 
X A ^ B is the evaluation and the curryfication of a map / : B x A — > C 
is denoted A(/) : B ^ C^. We sometimes note to denote trivial isomor- 
phisms in a CCC. We also note k : Homf(jxu)((C)|^", A) HomF(i){C, Tli{A)) the 
bijection associated with the adjunction F{nixu) ^ ^i- 

We now introduce the notion of control hyperdoctrine, in order to adapt 
hyperdoctrines to a description of second-order classical logic: the path from 
hyperdoctrines to control hyperdoctrines will take the same form as the one 
from cartesian closed categories to control categories: 

• we first give the hyperdoctrine structure 

• we introduce the symmetric pretensor ^ together with the neutral 
element -L 

• we then require the existence of codiagonals, i.e. for each object A two 
central morphisms : J- ^ A and : A ^ A — > A such that {A, Ia, Aa) 
is a symmetric monoid compatible with the premonoidal structure 

• we introduce a new condition, hypermonoidality, that asks for the 
commutation of the specialization functors with the premonoidal struc- 
ture and the codiagonals, and the preservation of centrality through the 
hyperdoctrine adjunction 

• we require the distributivity of ^ over the cartesian product 

• we introduce the exponential strength: the (already existing) mor- 
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phism Sa,b,c : B^^C ^ (B^ C)"^ is a natural isomorphism which respects 
some coherence conditions 
• we also introduce the quantification strength: the (already existing) 
morphism Pa,b '■ ^ B — > Tli{A ^ (B)^^^) is a natural isomorphism 

which respects a condition of centrality. 

In the following definition, [C] denotes the class of objects of a category C, 
regarded as a discrete subcategory. 

Definition 3 (binoidal hyperdoctrine) A binoidal hyperdoctrine H is an hy- 

perdoctrine together with, for each I e |H|, a binoidal functor ^7, i.e. a couple of 
two bifunctors ^] : F{I) x [f (J)] ^ F{I) and : [f (7)] x F{I) f (7) such that 
A^] B = B^^ A for all pairs of objects A, B. 

We recall the definition of a central morphism: in the ccc F(7), / : A — > A' is 
central if for every g : B ^ B' one has (/ B') o (A g) = (A' g) o (/ B) 
and (B' f) o {g A) = {g A') o (B f). 

Definition 4 (premonoidal hyperdoctrine) A premonoidal hyperdoctrine 

is a binoidal hyperdoctrine H together with, for each I G |H|, an object ±7 and cen- 
tral natural isomorphisms a a fi,c : (A^7B)^7C — > A^7(B^7C), I a '-A — > A^7_L7 
and : A — > ±7 ^7 A making the following diagrams commute: 



((A ^7 B) ^7 C)^7D- 
(A ^7 (B ^7 Q) ^7C)- 



■(A ^7 B) ^7 (C ^7 D)- 



- A ^7 (B ^7 (C ^7 D)) 
-A ^7 ((B ^7 C) ^7 D) 



A^fB 




(A ^7 ^i) B -A ^7 (±7 B) 

It is called a symmetric premonoidal hyperdoctrine if there are in addition 
central natural isomorphisms Ca,b : A ^7 B — > B ^7 A such that Ca,b ° Cb,a = idA^iB 
and: 

(A ^7 B) ^7 C^^A ^7 (B ^7 C)^^(B ^7 C) ^7 A 

(B ^7 A) ^7 C^^B ^7 {A ^7 C) ^^B ^7 (C ^7 A) 

A. 




A ^7 ±7 -±7 ^7 A 
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Definition 5 (symmetric monoid, codiagonals) Let H be a symmetric pre- 
monoidal hyper doctrine. A symmetric monoid in Hfor an object A e F{I) (I G |H|) 
is a pair of central morphisms iA : -L; — > A and V/i : A ^7 A — » A such that: 



A ±1 -^A A U ^7 A 



,.-1 



^A' 



{A^iA) ^jA^^A^jA 



A 



A2S'j(A^jA)^^A^jA 



A^jA 



A 



A^jA 



We say that a a symmetric premonoidal hyperdoctrine has codiagonals if, for each 
I e |H|, there is a symmetric monoid for every A g F(7), which is compatible with 
the premonoidal structure: 



±1 



Jaw 



U -Li 



A'^iB'^jA^iB 



A^lB A^c^B 




A^iB 



A^iA^iB'^iB 



The central morphism Va recovers the notion of contraction from linear 
logic. One can also define the weakening in a premonoidal hyperdoctrine 



Am 



with codiagonals: w = A^ A^[ ±[ — > A B. 

Definition 6 (focality) A morphism / : A — > B is focal if it is central and the 
two following diagrams commute: 



A- 




f 



A^iA^^B^iB 




■B 



A- 



f 



-B 



A premonoidal category with codiagonals will be called a pre-control cate- 
gory. A strict morphism : C — > D of pre-control categories is such that it 
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sends each element of the structure of C in the corresponding element of 
the structure D: ^(A ^ B) = i^{A) ^ i^{B), i^{±) = ±, [^{o ^ A) = ^(a) ^ fi(A), 

l^{(lA,B,c) = ^i^{A)4i{B),fi{C)f etc. 

Definition 7 (hypermonoidality) Let Hbea symmetric premonoidal hyperdoc- 
trine with codiagonals. We say that H has hypermonoidality if the specialization 
functors are strict morphisms of pre-control categories and ifx, preserve cen- 
trality of morphisms. 

Definition 8 (distributivity) Let Hbe a symmetric premonoidal hyperdoctrine 
with codiagonals. H is said to be distributive if: 

• the projections ui and 712 are focal 

• for each I e |H| and A e F{I) the functor - ^7 A preserves finite products: the 
natural morphisms (tii ^7 C, 712 C) : (A x B) C ^ (A C) x (B C) 
and <>v^ic : 1 C — > 1 are isomorphisms, whose inverses are respectly denoted 

^A,B,C O'^. 

Definition 9 (control hyperdoctrine) Let H be a distributive symmetric pre- 
monoidal hyperdoctrine with codiagonals and hypercentrality. For A,B,C G f (7), 
let Sa,b,c '■ {B^ ^1 C) (B ^7 C)^ be the canonical morphism obtained by currying 



For AeF{Ix U) and B 6 F{I), let 

Pa,b = K{K-\idn,iA)) ^zxu (B)f : H^A) B ^ H^A ^,xu (B)f '•^) 
H is called a control hyperdoctrine if 
• Sa,b,c 2s a natural isomorphism in C satisfying: 



eA,B,c:{B'''^iC)xA 



{B^^C)x(l;A^i) 



^ (B^^iQxiA^iQ ^ {B^xA)^iC ^ B^jC 



B^ C 



s' 



^1 C) 



(B C^)-^ ((B C)^)^ ((B C)^)^ 
where s;^ = B^^i ^ B ^ {C B)^ ^ (B C)^ anrf; 



B^ B"^ 




where = (zd^, zt?^) : A — > A x A. 
• Pa,b is a central isomorphism. 
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Sa,b,c is called the exponential strength, whereas Pa,b is the quantification 
strength. 

Remark: The naturality of g c in A and B follows from its definition, as 
well as the naturality of Pa,b in A and B. 



2.3 Interpretation of the calculus 

Thanks to the notion of control category, we are able to give a categorical 
interpretation of A[i2. 

Interpretation of types: 

If I = U", we note ^„ for ^7, ±„ for _Lj and Yl„ for Ylj. Each type A such that 

-> 

X ih A is interpreted as an object A* of F{U") as follows: 

-L* = -Ln = 1 X; = ni 

{A X BY =A*xB* (A ^ By = A* ^„ B* (A ^ B)* = {BY' 
(VX„+i.A)* = n„(A*) 

Note that the interpretation of X, is a morphism 7zj, : LT" — > in the base 
category |H|: actually, we use here the fact that the composition of f with 
the forgetful functor^: CCC — > Set generates the functor |H|(-, U). Hence, 
it is equivalent to define the interpretation of a type as an object in F{U") or 
as a morphism from U" to in |H|. 

Lemma 1 Let A and B be two types such that FTV{A),FTV{B) e {Xi, . . .,X„}. 
We note - ^ i-)[U\B]for F{idu" x B*). Then (A[B/X„+i])* = (A*)[Lf",B]. 

Proof: We prove it by a structural induction on A: as F{idun x B*) is a strict 
morphism of pre-control categories, the only cases to check are A = VXy.A' 
and A = Xj. The first case is ensured by the naturality of n„, whereas the 
second one only requires a direct verification. □ 

Interpretation of terms: 

A typing judgement of the form X; F I- ^ : A | A will be interpreted as a 
morphism T* A* ^„ A* in the category F{W). 

In what follows, for the sake of simplicity we use A instead of A* when 
dealing with an object of the category F{W). 
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IX. 
IX, 
IX, 
IX, 
IX, 
IX 
IX, 
IX 
IX, 



r h X,- : B,- 1 AI = r ^ Bi A Bi ^„ A 

rh*:T|A]] =rAi^i^„A 

r h : A X B I A]] = r A) x (B ^„ A) ^ (A x B) ^„ A 

r h 7ii(0 : A I A]] = r ^ (A X B) ^„ A A ^„ A 

T h 7Z2(0 : B I Al = r ^ (A X B) ^„ A B ^„ A 

r h : B I Al = r ii™, (ba 25.^^ A) X (A ^„ A) ^ (B^ x A) ^„ A ^ B ^„ A 

r h Ax^.t : A ^ B I AI = r (B ^„ A)^ ^ B^ ^„ A 

r h [a,]f : ± I Al = r ^ A; ^„ A A ^„ A ^ A 4 ±„ ^„ A 

r h i^a^.t : A I Al = F ^ ±„ ^„ A ^„ A 4 A ^„ A 



IX; r h [a,, ay]i : ± I Al = r ^ Ai ^„ Aj ^„ A '-^ A ^„ A ^„ A A ^ ±„ ^„ A 

l[X;r h ^{a^,^^).t : A ^ B I Al = r ^ ±„ ^„ A ^„ B ^„ A ^ (A ^„ B) ^„ A 
IX; r h AXi : VXA | A] = p ^ n„(A (A)[^r') ^ n„(A) A 

1[X; r h t[B} : A[B/X] | AJ = F ""'^^'^'''"""'^^) A[L7", B] ^„ A 

Theorem 1 (soundness) T/ie interpretation of second-order A^-terms in a con- 
trol hyperdoctrine is sound: for any couple of terms t,u such that X;T h f = M : A|A, 
we have ^X;T h i : A | AJ = l[X;r \- u : A\ A]]. Thus, every control hyperdoctrine 
is a model of A [12. 

The main steps of the proof of this theorem can be found in the appendix. 



3 The Game Model 



Game models have originally been introduced by Hyland-Ong and Nickau [ iHOOOl. 



Nic94l ]. and Abramsky-Jagadeesan-Malacaria [ATMOQ] , giving rise to two 
different paradigms. In this section, we introduce a game model for A[i2 
by choosing an HON-style of games. This requires to introduce a notion of 
arena, on which we have to define the notion of play. 

3.1 Polymorphic arenas 



In this section we will describe polymorphic arenas, i.e. the arborescent 
structure by which we are going to interpret types. We need to be very 
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precise in defining this structure, because the control hyperdoctrine struc- 
ture we wish to obtain forces us to have equalities like (A ^ B)[C/X] = 
A[C/X] ^ B[C/X], which are non-trivial in a purely geometrical structure. 

Hence, the name of nodes will carry an information about how the arena 
has been built: for example, the arena A — > (B x C) will be very similar to 
(A — > B) X (A — > C), except that the nodes will carry the information that the 
product has been made "before" the arrow. Actually, our arenas will be so 
near to formulas that we are allowed to use this correspondence to define 
substitution: instead of introducing it as an operation on forests, we define 
the operation A A[C/X] as the transformation of an arena A described 
by a formula F into the arena A[C/X] described by the formula F[C/X]. This 
trivial definition is not the original goal of our presentation of arenas, but it 
is one of its advantages. 

This arborescent structure of arenas hides a structure of hyperfore sts (i.e. a 



forest with additional structure), as introduced by Dominic Hughes |Hug97l ]. 
This structure is more convenient for dealing with plays on arenas, but we 
cannot introduce it from the beginning because of the precision we want for 
the objects of our model. 

Polymorphic arenas are built with the constructors ^, X and the construc- 
tor — > is introduced at the end. 



Construction of arenas: 



We consider the set of type variables X, Y, . . . to be in bijection with N\{0}, 
and we will further write this set X = {Xj \ / > 0}. 

We define the set N of nodes, based on the following grammar: 

c::=*| Xi\ x^i''U V(c)| (c,l)| (c,2) | -(c) | (c^c)| (c,c,l)| (c,c,2) 

for i, i G N. The nodes x, (resp. x^) will be called free variables (resp. bound 
variables). 

For a given node c, we note V{c) the sets of nodes of the form x„ x^^'"^'^ or ★ 
occurring in c (we call them the variables of c). We define on the grammar 
the operation c i— > c[c'/^] (where x can be either x, or x^'"^ ), which simply 
consists in replacing each occurrence of x in c by c', and the operation 
c I— > c[*] which consists in replacing each occurrence of a variable of V{c) 
by ★. 

A forest A is a set of nodes E^, together with an order relation <a on Ea such 
that for every c in Ea, the set {c' | c' < c] is finite and totally ordered by <a- 
We note a <a b if a <a b and a b, and we say that c is a root of A if there 
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is no c' in Ea such that c' <a c. Finally, for two nodes a and a' in a forest A 
such that a < a' , we note d{a, a') the number of nodes x such that a < x <a' 



If A and B are two forests, we define the following forests: 

• T, _L and X, are defined by: 

• Et = = {★} Ex, = X,- 

• <T, <± and <x, are the empty relations 

• A X B is given by: 

• Eaxb = {(«,!) I fleA}U{(fc,2)| heB] 

■ c <AxB C iff (c = (fl, 1), c' = (fl', 1) and a <a «') or (c = 1), c' = (&', 1) and 



• -lA is given by: 

. E^A = {*} U {-.(fl) \ aeA} 

■ c <-,A c' iff (c = ★ and c' ★) or (c = -i(fl), c' = -'{a') and a <a a') 

• A ^ B is given by: 

• Ea^b = {{a^b)\ a root of A A root of B} U {{a, bo, 1) | bo root of B A 3ao e 
Ea, ao <A a} U {{b, Uq, 2) | root of A A 3bo e Eg, bo <b b} 

■ c <Am C iff (c = (fl ^ fc), c' = {a', b, 1) and a <a a') or (c = (a ^ fc), 
c' = {b',a,2) and <b fc') or (c = {a,b,l), c' = {a' ,b,l) and a <a fl') or 
(c = (&,fl,2),c' = {b',a,2) and & <b 

• VXj.A is given by: 

. Evx,.A = {V(fl[x(°'"[*]Vx/]) I a root of A} U {^[^('^(''O''')'''^!*])/^,] | root of A A 
«o <A «} 

• c <vx,.A C iff (c = fl[x('*(''0''')'''o[*]Vx;], C = fl'[x(''(''0'''')'''o[*])/x,-] and <a a <a 
a') or'(c = V(fl[x(°'''[*]V^i]), C = a'ix^'^^"'"'^'^^*^^ /Xi] and a < a') 

Remark: The variables x^^'"^^ correspond to bound type variables, and hence 
are related to an occurrence of V; but the challenge is to be able to characterize 
which one ! For this reason, they carry two pieces of information: first the 
distance (in the forest) of the node where this occurrence appears; second, 
the name of the node corresponding to this occurrence. Note that it is still 
normally not enough to say which occurrence of V they are related to (think 
to A ^ A for example), but thanks to the uniqueness of the construction of 
an arena, that we establish further, it becomes a sufficient information. 

Example 1: Let us consider the arena A = VX3.(-.± ^ X3) ^ VX3.(-.X2 ^ X3). 
It can be represented graphically as follows: 



b <B b') 




with: 
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C2 = ((^C*), 1), V(* ^ x(0'*^*))), 1) 

C3 = ((-(X2), X^°'*^*K 1), V(* ^ x(0'*^*))), 2) 

There are many things to note: first, the occurrence of jC^'*"^*) in C2 and C3 
does not imply any dependency on the occurrences of V in Ci. Moreover, 
one can remark that the two occurrences of x^'^'*^*' in Ci are a priori difficult 
to bind with a specific occurrence of V. However, there is no ambiguity if 
one can retrieve the way the arena has been built up. 

All of this will be explicited by the following definitions. o 



The set ^ of polymorphic arenas is the smallest set of forests containing T, 
±, Xi for i G N, and which is closed under the constructions product, lift, 
par and quantification. We note FTV{A) = {X, | 3c e Ea,x, appears in c}. 
If FTV{A) = 0, then A is called a closed arena. The set of closed arenas is 
denoted Ti. 

As a consequence of the definition, a polymorphic arena is described by 
a second-order formula built over ^, x. Actually, this description is 
essentially unique: let us define the congruence rule =p by: 

• T^A=pT 

• A^T =pT 

• T X T =p T 

• -T =p ± 

. VX,T =p T 

The ap-equi valence on formulas is the equivalence relation built over the 
congruence rule -p and the ^-equivalence. 

Lemma 2 Let A be a polymorphic arena, there exists a formula describing A. 
Furthermore, let F and F' be two such formulas, then F and F' are equal up to 
ap-equivalence. 

Proof: This can be proved by induction on A. If A is empty, then either 
F = Fi^ F2 with Fi or F2 describing an empty arena, or F = VXF' with 
F' describing an empty arena, or F = Fi X F2 with Fi and F2 describing an 
empty arena (indeed, the other cases lead to non-empty arenas). 

If A is not empty, let F be a formula describing A. Consider a root c of A: 

• if c = Xi then F = X, 

• if c = then we have two possibilities: either Ea = {c}, and necessarily 
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F = _L or F = -iF' with F' describing an empty arena, or Ea is not reduced 
to c, and then A = -lA' for some non-empty A' e and we necessarily 
have F = ^F' 

• if c = (ci ^ C2), then we necessarily have F = F-[^ F2, A = Ai^ A2, and the 
names of nodes allows to recognize the arenas Ai and A2 

• if c = (c', 1) or c = (c', 2), then we necessarily have F = Fi x F2, A = Ai x A2, 
and the names of nodes allows to recognize the arenas Ai and A2 

• if c = V(c') then each root c„ can be written c„ = V(c',), and we necessarily 
have F = VX,.F(0, A = VX,-.A(0 for some X,- ^ FTy(A), where A(0 is built 
by replacing each c„ by c'„, and by replacing each occurrence of x*^''^"t*^^ in 
a node Cq >a c„ (with d{Cj„Co) = /ill by x,. These occurrences x'^^''^"^*^^ are 
called the bound variables of the node c„, and the nodes of A where they 
appear are called its bound nodes. By induction hypothesis, F is unique 
up to ap-equivalence. 

□ 

This result means that there is a one-to-one correspondence between arenas 
and ap-equivalence classes of formulas. 

Definition 10 (variable substitution) Let A and B are two -polymorphic arenas, 
respectively described by Fi and F2. We define the substitution A[B/X,] as the arena 
described by the formula Fi[F2/X,]. 

Note that this definition makes sense only because each arena corresponds 
to exactly one formula up to ap-equivalence, and because the class of ap- 
equivalence of Fi[F2/X,] does not depend on the representatives we choose 
for Fi and F2. 

Hyperforest: 

Now that we have defined a notion of substitution on our arena, which triv- 
ially respects the required equalities like (A ^ B)[C/X] = A[C/X] ^ B[C/X], 
(A X B)[C/X] = A[C/X] X B[C/X], etc, we can express the structure of hyper- 
forests that is hidden in these arenas: the notion presented here is directly 
inspired by Hughes' hyperforests which he introduced for his game model 
of system R Actually, as we shall see further, this structure completely carries 
the equivalence relation corresponding to type isomorphisms. 

For a given set E, P(E) is the set finite multisets of elements of E. The multiset 
containing the elements ai,a2, . . . ,an will be denoted {{ai,a2,..., an}}. 



This is the reason why we specify the couple q = {j, c) for a variable x^: this allows 
us to determine exactly which are the variables x'^ related to a specific occurrence 
of V. 
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Definition 11 (hyperforest) An hyperforest H = {£,<,% D) is a finite forest 
(E, <), together with a multiset of hyperedges 'R G P(E x P(E)) such that, for each 
b = (S, t) in % we have t < s whenever s e S, and a function D :E PW which 
associates to each node its multiset of decorations. 

Definition 12 (quantifiers) Let Abe a polymorphic arena. For every c G E^, we 
define the multiset var{c) by induction on c: 

• var{Xi) = var{x'^) = var{-k) = 

• var{{a ^ b)) = var{a) + var{b) 

• var{{a,a' ,\)) = var{{a,a',2)) = var{{a,l)) = varUa,2)) = var{-i{a)) = var{a) 

• var(y{a)) = var{a) + [S] where S is the multisei}} of bound nodes ofiia). 

The multiset 'Ra of quantifiers of an arena A is defined by 'Ra = {[{t,S) \ t G 
Ea A S G var{t)]}. For any quantifier b = (t, S), we note T{b) = t (the target ofb) 
and S{b) = S (the source ofb). 

Finally, for c G Ea, we note quant{c) = {(c, S) G "Ra}- 

Definition 13 (free variable publisfier) Let Abe a polymorphic arena. For ev- 
ery c e Ea and i G N, lue define the multiset Da{c), called the free variable 
publisher, by induction on c: 

• DAixd = {X,} 

• Da{x^) = Va{^) = 

. DA{{a'^b)) = DA{a) + DA{b) 

• DA{{a,a',l)) = DA{{a,a',l)) = DaHu,!)) = DaHu,!)) = DAiW)) = £>A(-(fl)) = 
VAia) 

Lemma 3 For any polymorphic arena A, (Ea, <a, 'Ra, Da) is an hyperforest. 

Example 2: For the arena A defined in the preceding example, var{ci) = 
{{Si, Si}} where S, contains only the rth occurrence of jC^'*"^*). So, Ra = 
{{bM] with fci = (ci,{{ci}}) and fci = (ci,{{ci}}). 

Besides, Da{ci) = Da{c2) = and D^fo) = {{X2}}. 

Hence, the hyperforest associated to the arena A can be represented graph- 
ically by: 




^ A node appears n times in S if it contains n bound variables of V(fl). 
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where straight lines stand for the relation <a (the smallest element is at 
the top), arrows stand for the hyperedges, and decorations are attached to 
nodes. o 



Substitution for a quantifier: 

In order to define moves in an arena, we wish to give a definition of substitu- 
tion for a quantifier, i.e. to define A[B/fc] for A,B e ^ and b G 'Ra- According 
to the definition 12, the quantifier b is necessarily related to a specific occur- 
rence of V in the node 7~(fc). Moreover, we know from the proof of lemma 2 
that this occurrence of V is itself related to a subformula C - VX/.C(z) in the 
formula describing A. Then we define the arena A', which is described by 
the formula A where C has been substituted by C{i) (with X, ^ FTV{A)), and 
we set A[B/b] = A'[B/Xj] (note that this definition does not depend on the 
choice of z). 

Origin: 

As our arenas are nearly equivalent to formulas, we introduced the sub- 
stitution through formulas. However, we could have given an explicit for- 
mulation of the arena A[B/X,], starting from A and B. But this formulation 
would have been very technical, whereas for our model we just need to 
know that each node of A[B/X,] is related to a particular node of A. This 
idea is expressed in the following lemma. The notation [a{x) / x]xev{a) with 
a : V{a) — > N indicates successive substitutions [a(x)/x] for x varying in 
Via). 

Lemma 4 Let A, B be two polymorphic arenas, and c a node o/E^[b/x,]- Then 
there exists a unique node a e and a function a : V{a) — > N such that 
c = a[a{x)/x]xev{a)- 

The node a is called the origin of c in A, and denoted origin{c). 

Proof: First we prove the uniqueness of the node a: suppose a,b & Ea with 
a[a{x) / x]xev{a) = b[(i{x)/x]xev{a)- Then an induction on A ensures that a = b: 

• if A = X, or A = _L it is obvious 

• if A = VX;.Ao we have a = V(flo) and b = V(fco) with ao[a{x) / x]x(=v{ao) = 

M^{x)/x]xeV{bo) 

• if A = Ai ^ A2 then a = ai^ az or a = {ai,a2,l) or a = {ai,a2,2). Then 
we have respectively b = bi ^ b2 or a = (fci,fc2, 1) or a = {bi,b2,2), with 

ai[a{x)/x]xev{ai) = bi[^{x)/x]xev(h) anda2[a{x)/x]xev{a2) = b2[^{x) / xj^eVib^) 

• the other cases are similar. 

The existence of a can be proved by a structural induction on c: 
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• if c = or c = -A- or c = x^^''^^ the proof is trivial 

• if c = (c', 1) or c = (c',2) then A[B/X,] = Gi x G2, and from the definition 
of substitution we deduce that either A = X, or A = Ai x A2 with Gi = 
Ai[B/X/] and G2 = A2[B/X,]; in this case c' is a node of Gi or G2, hence 
c' = aoia' (x) / x]xev(ao) withflo node of Ai or A2 

• if c = -i(c') then A[B/Xj] = -iG, and from the definition of substitution we 
deduce that either A = X, or A = -lA' with G = A'[B/X,]; in this case c' is 
a node of G, hence c' = flo[<3!'(^)/^]jey(flo) with Uq node of A' 

• ifc = Ci^C2 then A[B/X,] = Gi^G2, and from the definition of substitution 
we deduce that either A = X, or A = Ai ^ A2 with d = Ai[B/X,] and 
G2 = A2[B/X,]; in this case Ci is a root of Gi and C2 is a root of G2, hence 
Ci - ai[ai{x) / x]xev{ai) with Ui root of Ai, and C2 = ^J2[o!2(^)/^]xey(fl2) with ^2 
root of A2 

• if c = (ci, C2, 1) then A[B/X,] = Gi ^ G2, and from the definition of substi- 
tution we deduce that either A = X, or A = Ai ^ A2 with Gi = Ai[B/X/] 
and G2 = A2[B/X,]; in this case Ci is a node of Gi and C2 is a root of G2, 
hence by induction hypothesis Ci = ai[ai{x) / x]xev(ai) with Ui node of Ai, 
and C2 = fl2[«2(^)/^].Y6y(fl2) with ^2 root of A2 

• if c = (ci, C2, 2) then A[B/X,] = Gi ^ G2, and from the definition of substi- 
tution we deduce that either A = X, or A = Ai ^ A2 with Gi = Ai[B/X,] 
and G2 = A2[B/X,]; in this case Ci is a node of G2, C2 is a root of Gi and 
J^cz < '^c/ hence by induction hypothesis Ci = fli[«i(x)/x]xey(«i) with Ui node 
of A2, and C2 = fl2[«2(^)/^]xey(fl2) with ^2 root of Ai 

• if c = V(c') then A[B/X,] = VX^t.G for some ke'N, and from the definition 
of substitution we deduce that either A = X, or A = VX)t'.A'. In this case, 
thanks to a-equivalence, one can choose k = k' i, and so G = A[B/X/]; c' 
is a node of G, hence c' = cio[<^' i^) / x]xev(ao) with node of A'. 

□ 

As a consequence, one can also establish a notion of origin for the substitu- 
tion A i-> A[B/fc], defined similarly: for any node c of E^[b/x,], there exists a 
unique node fl G and a function « : — > A/" such that c = a[a{x)/x]xev{a)> 
or c = fl'[<a;(x)/x]xey(fl) where a' is obtained from a by erasing one occurrence 
of V. 

Definition 14 (offspring) Let A, B be two polymorphic arenas, c node o/E^[b/x,] 
(resp. ofEA[B/b]) md a = origin{c). We say that c is an offspring of a in A[B/X,] 
(resp. A[B/b]) ifc is minimal among the c' such that a = origin{c'). 

Example 3: Let us consider the arena A = VX3.(^± ^ X3) ^ 7X3.(^X2 ^ 
X3) from the preceding examples, and B = (-1X1) ^ Xi. Then A[B/X2] = 
VX3.(^± ^ X3) ^ VX3.(-((^Xi) ^ Xi) ^ X3) can be represented as follows: 
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with: 



d2 = ((-(★), x(0-*^*), 1), V(* ^ x(0,*^*))), 1) 

= ((^(* ^ xi), x^O'*"^*), 1), V(* ^ 2) 
= ((^(^ 1), x(0'*^*), 1), V(* x(0'*^*))), 2) 

Consider for example the node ^3: we can write = a[b/x2] with a = 
((-(X2),x(0'*'^*),l), V(* ^ x(0'*^*))),2) G £a and = ★ ^ xi G Eg. Hence, is 
the origin of d^, i.e. the part of the move played in A and b is the part played 
in B. Similarily, d^ = a[c/x2] with c = {i^ Xi,Xi, 1) G Eg, so the origin of ^4 is 
also a. But d^ is an offspring of a whereas ^4 is not: indeed, d^ is the minimal 
node in A[B/X] whose origin is a. o 

Remark: For the rest of this article, we introduce the constructor A ^ B = 
(-lA) ^ B. We will generally identify B (resp. A) to its trivially isomorphic 
part (resp. to its copies) in A — > B. 

3.2 The notion of game in a polymorphic arena 

We now informally describe a play in a polymorphic arena A, with pa- 
rameters X = (Xi, . . . , X„) (this parameters will correspond to the free type 
variables appearing in a term). 

As in propositional HON-games, a play is a sequence of moves, played 
alternately by two players: P (the Player) and O (the Opponent). But this 
time, because of second-order, playing a move does not simply consist in 
choosing a node in the arena: it is a more complicated process. Each move 
follows different steps : 

• one choose a node in the forest given by the moves justifying this move 

• one instantiates all the quantifiers whose target are the chosen node 

• one substitutes the arena where we are playing 

• if necessary, one chooses a new node in the arena we obtained, and one 
iterates the process. 
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Let us take a look further at how the process is actually working. 

A move m is played in a closed arena H by P or O, who begins by choosing 
a node Ci in B° = H, and then instantiates by a closed arena each quantifier 
h such that T(b) = Ci. This modifies the arena consequently: each node 
d G S{b) from B° is replaced by the closed arena instantiating h, this gives us 
the closed arena B\ 

But what happens if C\ G S{h)l Once the node has been replaced by its 
instantiation G, one may have a doubt on the node the player really chose: 
for example, if G contains two trees, one must say which of the two roots 
has been chosen. Moreover, if the chosen node contains quantifiers, they 
have to be instantiated as well. So, the player has to choose another node 
C2 in B^, and possibly to instantiate the corresponding quantifiers to obtain 
a new closed arena B^, etc. This process is an "horizontal" enlarging ^\ in 
the sense that one does not go deeper in the closed arena, but one makes 
it evolve until there is no ambiguity on the chosen node. The player finally 
stops on a node c„ such that there is no h for which c„ G S(b). c„ is called the 
resulting node of m, and the closed arena B" is its resulting arena. 

As in a propositional setting, a play in a polymorphic arena A is a sequence 
of moves with a relation of justification, but this time if m, justifies nij we 
require mj to be played in the resulting arena of m,: consequently, a move in a 
play can be chosen only when the quantifiers above it has been instantiated. 
Moreover, each initial move begins with a function 6 : {Xi, . . .,X„} — > 9i 
which instantiates every variable X, by a closed arena; the player replaces in 
the arena A each node decorated by X, by the closed arena 0(X,), and then 
plays a move beginning with a root in the closed arena finally obtained: this 
allows to play in any polymorphic arena instead of just in a closed one. 

Explicit examples will come after the definition to make all these intuitions 
clearer. 

3.3 Moves, plays and strategies 

Definition 15 (move) A move in a closed arena H takes the form 

m = [ci: A\lh\;A\lh\;...;AlJhl]{c2 : A\lh\; . . .■,AlJhl] 

{Cn:AllVl-...-Allhl\ 

with the following conditions: 

^ In A/j2, this horizontal enlarging would correspond to a term with successive 
type instantiations, like i{VX.X|{VY± ^ y}{VZ.Z ^ Z}.... 
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• Ci is a node of = H (called the first node of m) such that quant{ci) = 
{h\,..., hi); we note = H{A\lh\, . . • , A^/fciJ 

• for all r G [2, n\, Cj is a node of W such that c,- offspring of c,-_i in B^ and 
quantic) = {h\, }}[}; we note B'^^ = B''[A[/b[, . . .,A[/bl] 

• for all re [l,n - 1], there exists hi such that Cr e S{hi) in B'';for Cn, there is 
no hi such that c„ G S{hi) in B" 

We call resulting arena ofm the closed arena B"'^^, and resulting move the move 
Cn, which is a root ofB". 

Remark: In order to avoid any confusion, take care to the fact that, in this 
model, the notions of node and move do not coincide as they did in the 
propositional model. 

Definition 16 (initial move) An initial move in a polymorphic arena A with 

-» -» 
parameters X = (Xi,. . .,X„) (FTV{A) c X) takes the form m = dm' where 6 : 

{Xi,. . .,X„} — > 'H and m' is a move in the closed arena H = A[0(Xi)/Xi] . . . [0(X„)/X„] 

such that the first node ofm' is a root ofH. 

Example 4: Consider the arena A = VX3.(-.±^X3)^VX3.(-.X2^X3) described 
in the example 1, and the arenas Hi = VX.-iX, H2 = -L, H3 = _L. 

Then m = d[ci : HJhuHi/hilic' : H3/&3], where 0(Xi) = ^(Xz) = ±, c' is the 
root of A' = ((-.±) ^ (VX4.-.X4)) ^ ((-.±) ^ ±) and ^3 is the unique quantifier 
of A', is an initial move in A with parameters X = (Xi, X2). 

The resulting arena of this move is A" = ((-i-L) ^ (-iJ-)) ^ ((-'-L) ^ -L), which 
can be represented graphically as: 



c; 

c: d ci 



with: 



c; = (★ ^ ★) ^ (★ ^ ★) 

4 = (H*),*,i),*^*,i) 

c^ = (H*),*,2),*^*,l) 

c; = (H*),*,u*^*,2) 



With these definitions, the internal structure of moves carries all the second- 
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order complexity, so that the external structure will now take the same form 
as in a propositional setting: the definitions of plays, strategies, etc, will be 
the standard ones. 

Definition 17 (justified sequence, play) A justified sequence in a polymor- 
phic arena A with parameters X is a finite sequence of (initial and non-initial) moves 
s - mi.. . Mn, together with a partial function ref : {mi, . .., m„} ^ {mi, . . . ,m„} 
such tha{^ 

• if ref (mi) is not defined, then m, zs an initial move in A with parameters X 

• if ref{mj) = m; then i < j and m -j non-initial move in the closed arena H' 
(resulting arena of mi) such that its first node is a son of the resulting node of 
mi. 

In a justified sequence s, we say that a move m is played by P (resp. by O) if the 
greatest natural number n such that ref{m) is defined is odd (resp. even); then we 
note A{m) = P (resp. A{m) = O). 

A play is a justified sequence s = mi . . .m„ such that, for alll < j <n-\, we have 
A(my+i) A{mj). The set of plays on A with parameters X is denoted !Pjj(A). A 
thread is a play s = mi . . .m„ such that mi is the only initial move in s. A P-view 
(resp. an 0-view) is a play s = mi . . .m„ such that ref{mj) = my_i for each j odd 
(resp. even). A bi-view is both a P-view and an O-view. 

Example 5: 

Consider the term t = AZ.AXAx"^^-^ .Au^.Av^.ix{\/U.U}{X ±})u of type 
A = MZMX.iMY.Y) ^ X ^ X ^ ±. As we see further, this term will be 
interpreted in our model as a set of plays: we are going to describe one of 
these plays. For the sake of simplicity, we do not pay attention to the name 
of nodes, we only explicit the hyperforest structure associated to an arena. 

The starting arena is Go, interpretation of A: 



Go = 



We define three other arenas: 



^ Note that ref is actually a partial function from occurrences of moves to occur- 
rences of moves. 




26 




The first move of Opponent is mi = d[a : H' /bi;H/b3] {d does not play any 
role here) and it transforms Go into: 



Gi = 




The second move is played by Player: it is written m2 = [b : H' /b2][g' '■ 
H" lbi\[h' :] and it transforms Gi successively in: 




We now understand why it is important to have a sequence of nodes with 
their associated closed arenas: when we play [b : H'/b2\, this corresponds 
to xl'iU.U}, and when we play [g' : H"/&4] this corresponds to {X — > ±}. 
Finally, [h' :] simply indicates the last node we chose (there could be several 
choices if b^ were instantiated by a product for example). 

The rest of the play is a simple dialog between Opponent and Player in the 
arena G3: 





= [63 


:] 


111.4 


= {ei 


:] 


1115 


= [/i 


:] 


me 


= [/3 


:] 



27 



o 



Definition 18 (oldest ancestor) The oldest ancestor ofm in a play s, denoted 
ref° (m), is the move m' such that ref (m) = m' for some n and ref{m') is not defined: 
it is an initial move. We note dm the 6 function appearing at the beginning of the 
move ref°{m). 

Let us consider the arena A — > B = -lA ^ B, and let s G !Pj^(A — > B) and m be 
a move of s. Let d be the origin of the first node of m. There can be two cases: 
either d E B,m which case each node appearing in m is written (ci, 2); then 
we define the move m by replacing each node (ci, ^,2) by Ci. Or d e A, in 
which case each node appearing in m is written (-i(ci), C2, 1); then we define 
the move m by replacing each node (-i(ci),C2, 1) by Ci and, if is a root of 
A, by adding the function 0,„ at the beginning of the move. These notations 
allow us to define the notion of restriction of a play: 

Definition 19 (restriction) Let s e PjiiA B). The restriction of s to A (resp. 
to B), denoted s \a (resp. s \b), is the sequence of moves tHi, ...,tn„ (with the same 
pointers as in s, wherever it is possible), where m\, . . . ,mnare the moves such that 
the origin of their first node is a node of A (resp. ofB) : we say that these moves are 
played in A (resp. in B). 

With this definition, s I a (resp. s Ib) is a justified sequence in A (resp. in B) 
with parameters X. 

Definition 20 (strategy) A strategy o in an arena A with parameters X, denoted 
o : A;X, is a non-empty set of even-length plays ofPfiA), which is closed by even- 
length prefix and deterministic: ifsa and sb are two plays of o then sa = sb. 

Definition 21 (central strategy) Let a : A ^ B;X. a is central if 

• in each play of a, for each initial move m there is exactly one move m' played in 
A and justified by m 

• for each initial move m, there is a play mm' G o with m' played in A. 

3.4 Cartesian closed structure 

We now have the ingredients for our model: polymorphic arenas and strate- 
gies. Let us give some basic categorical structure on these objects. 

Definition 22 (identity) The identity strategy on A, id a : A — > A; X, z's defined 
by idj^.^ = {s G ffiAi A2) | even prefix ofs, t Iai= t U2} (where Ai andA^ 
stand for the two occurrences of A in A — > A). 
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We let the reader check that this indeed defines a (central) strategy. 



Definition 23 (composition) Let A, B, C be three polymorphic arenas. An in- 

-> 

teraction on A, B, C with parameters X is a justified sequence on {A ^ B) ^ C 
with parameters X such that u \a,b^ ^x(^ ~^ " \b,c^ ^x(^ ~^ ^) 
u \a,c^ ^x(^ ~^ Q- ^^^^ intf{A,B,C) the set of such interactions. Let 
cr : A — > B;X and x : B — > C;X, we call composition of o and t the set of plays 
o;t = [u \a^c\ u e int^{A,B,C), u \a,b^ o and u \b,c^ t} 

We shall now recover many properties which have already been p roved in 
game semantics for the propositional case (see for example | Har99tl ). As we 



said, the inner structure of moves is very different in second-order games, 
but not the structure of plays and strategies, so that all reasonings in the 
propositional case will still be valid in this case. In order to reuse them 
directly instead of rewriting them, we establish a translation of second- 
order objects (polymorphic arenas, moves, ...) into a propositional setting 
with infinite forests: basically, the idea is to associate, to each occurrence of a 
move in a play, its non-empty bi-view, and to consider it as a "propositional" 
move (the prefix order on bi-views will give us the order relation in the 
arena). 

Pay attention to the fact that this translation is only a tool, not a necessary 
construction, and that in particular it has nothing to do with the inter- 
pretation of A/.i2 in a control hyperdoctrine (although we chose the same 
notation). 

Definition 24 (translation) We consider one set of parameters X = (Xi, . . . , X,,). 

-» 

Let A he a polymorphic arena such that FTV{A) c X, and S'Va be the set of non- 
empty bi-views on A. If we note < the prefix order on bi-views, then [[A| = (S'Va, <) 
is a (generally infinite) forest, called the translation of the arena A. 

Let s e PgiA) with s = mi.. . m„. To each occurrence m, in s one can associate 
the unique bi-view Vi it belongs to, and this bi-view is a move in \A\. Then 
[[s| = Ui . . . Vn (with the same pointers as s) is a play in [[A]], called the translation 
ofs. The translation of a set a of plays on A is |[cj]] = {[[s]] | s G a}. 

Lemma 5 (i) [[cr]] is a strategy on [[AJ if, and only if, o is a strategy on A. 
(ii) Iflol = M theno = t. 

Proof: 



(i) From the definition of the translation we immediately deduce that [[c7| 
is a non-empty set of even-length plays, closed by even-length prefix 
if, and only if, it is the case for o. 

Besides, suppose a is deterministic and [[sfl]], |[s&]l e [[aj. Thensfl, sb G 
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o, so sa = sb and faj = fbj. Reciprocally, if [[cr]] is deterministic and 
sa, sb G o, then pflj, pfc]] G [a]], so |[sfl]] = [sfc]] and sfl = sb 
(ii) It suffices to remark that the translation s i-> [s]] on plays is injective. 

□ 

But we have to take caution to the fact that we do not have [[A — > B]] = 
|[A]] — > |[B]]. However, there is an isomorphism between |[A — > BJ and a 
subforest of |[A]] — > [BJ: to each move of |[A — > BJ (which is in fact a non- 
empty bi-view [i = mi. ..m„ played on A — > B), one associates the move /j' 
defined in the following way: 

• if origin{m„) eB, [i' = [i 

• if origin{mn) G A, /j' = {dm^m2)in3 ...nin (which is indeed a bi-view in A). 

In what follows, we will call this operation an adaptation. 

We can extend this definition to a play: if s = /.ii . . . mu„ then s' = /i^ . . . mw^, 
and to a set of plays: o' = {s' \ s G cr}, and we have: 

Lemma 6 [[a; tF = M'; W' 

Proof: Note first that the first composition takes place in a second-order 
setting, whereas the second one is the usual propositional composition. 
Remark also that the part of [[AJ — > [[BJ which is isomorphic to [A — > B]] 
is composed of the nodes of [[B]] and of the copies of nodes of [[AJ which 
begin with the same 6 function as their ancestor in [[B]]. 

Suppose a : A ^ B and x : B — > C. Then a-i = [[cr; x]]' is a set of plays on 
m ^ ICl as well as ^2 = M'; Izf. 

For each s e a-[, s = t', where t is such that there exists u played on (A — > 
B) ^ C verifying ^ = |[m t A, C]], m t ^/ B ^ cr and u t B, C G x. By translating 
and adapting the moves of u, one obtain a justified sequence v played on 
im ^ PI) ^ ICi such that V r lAI, Id =s,v I [[Ai [[B]] = ([[u t A,B]])' 
and t IBl [[CI = ([[u t B, CJ)'. Hence y t lAJ, [[B]| G (EaJ)', y [ Pi Ed G 
([[cr]})' and s G Uz- 

Conversely, if s G a2, there exists u played on ([[AJ — > p]|) — > [[C][ such that 
s = w r EAiEd, w r [[AiPl G {MY and i/ t EBIJCJ G ([[xj)'. The two 
last conditions forces u to be in the part of ([[AJ — > pj) — > [[CJ which is 
isomorphic to |[(A — > B) — > C]|, so that u can be adapted to obtain a sequence 
of |[(A — > B) — > CJ. By taking the inverse translation of this adaptation 
of u, one obtain a justified sequence v played on (A — > B) — > C such that 
V I A,B eo,v f B, C G X and v Ia,b= i with s = Itf . Hence s G ^2. □ 
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This result allows us to manipulate the translation of composition easily, 
and this yields to the following results: 

Lemma 7 (i) If o : A ^ B;X and t : B — > C;X, then o;t is a strategy on 
A — > C with parameters X. 
(ii) If a : A — > B;X, o-Jds = idA,o = o. 

(Hi) If a : A ^ B;X, T : B ^ C;X and p : C ^ D, we have {a; t); p = o; (t; p). 
Proof: As an example, we prove the last assertion: 

m t); pF = lo; tF; IpF = loj'; Ipl' = laf; It; pF- As it is trivial that 
a' = jS' iff a = jS, we have laf = l^f iff a = jS, so {a; t); p = o; (t; p). □ 

Finally, for each sequence of variables X = Xi, . . . , X„, we obtain a category of 
games : objects are polymorphic arenas whose variables are chosen between 
Xi, . . . , X,„ and morphisms are strategies on these arenas with parameters 
X. We note 0oi^i> ^n) this category 

To obtain a cartesian closed structure, we add innocence: 

Definition 25 Let s be a play on an arena A, we define the view of s (which is 
indeed a P-view), denoted '~s~', by: 

• '~e~' = e 



^srrP = mifm is an initial move 

'~sm"' = '~s~'m ifm is a F-move 

^smtn'^ = ^sm'^n ifn is an O-move justified by m. 



A strategy o : A is called innocent if, for every play sn of a, the justifier of n is 
in '~s"', and if we have: if smn e a, t e a, tm play in A and '~sm~' = '~im~' then 
tmn e o. 

Note that the game isomorphisms between isomorphic arenas we have built 
in proposition 3 are innocent. 

The structure of plays is preserved by translation, so that we have : \o\ is 
innocent if and only if o is innocent. So, idA is innocent and if o and t are 
innocent then cr; x is innocent. 

Thanks to these properties, we obtain a subcategory of Qq{Xi, ... , X„) by con- 
sidering only innocent strategies. We denote this subcategory Q{X\, . . . , X„). 

Proposition 1 Q{X\, X„) is a cartesian closed category. 

Proof: Let A and B be two arenas in propositional game semantics, we note 
A = B when there is an isomorphism between the forests A and B. 
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We have isomorphisms [[A x B]] ^ [[AJ x IBJ and lA ^ BJ ^ [[AJ ^ Pi 
that we treat as equalities. 

We introduce the projections tii = {s G Pji{A x B ^ A) | s Ia^a^ i^A}, 
7i2 = {s G PjiiA X B ^ A) I s Ib->b& ids] and the product of strategies 
o XT = {s e P^iiA X C) ^ (B X D)) | s^^b g cr a sc^d e t}, and we check 
that EtiiF = Hi : m X EBJ ^ m, ln2f = 712 : lAJ x m ^ EBI and 
lo X tF = lof X [[tF : (lAI X [CI) ^ (EBJ x |[C]]). Similarly, we introduce 
A ^ cr = {s G P^{{A ^ B) ^ (A ^ C)) I s \a^a^ idA A s te^ce cr) and we 
can check that [[A ^ aj = lAJ laj. 

All the commutative diagrams and unicity properties we need to check are 
guaranteed by lemmas 5 and 6. □ 

3.5 Construction of an hyperdoctrine 

In this section, we set up the operations that will give rise to an hyperdoc- 
trine. 

The first ingredient of this construction is a base category B: here it has as 
objects natural numbers and as morphism n ^ m the m-tuples (Ai, . . . , A,„), 
where A, G Q{Xi, . . . , X„) for 1 < i < m. The composition in this category is 

substitution: if A = {Ai, . . . , A^) : n ^ m and B = <Bi, . . . , B„> : k ^ n then 
AoB = <Ai[B/X],...,A„,[B/X]) : ^ m. 

We then have to define a functor Q : — > CCC (where CCC is the category 
of cartesian closed categories with strict morphisms of ccc's). We choose 
Q{k) = Q{Xi, Xk), and for each C : n ^ m we define Q{C) : Q{m) Q{n) 
(the specialization functor): 

• for every A G Q{m), we set Q{C){A) = A[C] 

-> -> -4 

• for every a : A ^ B;Xi,. . .,X,„, we set Q{C){o) = a[C] where o[C] : 

-> -> 
A[C]; Xi, . . . , X„ is defined by: s G cr[C] if and only if s G cr, where s is 

obtained by replacing each initial move m„, = Om'. in s by m" = d'm'. 

with 0'(X,c) = Q[0(Xi)/Xi, . . . , 0(X„,)/X,„]. 

We let the reader ascertain that if cr is an innocent strategy then cr[C] is an 
innocent strategy. 

We check that this actually gives us a functor Q : B^p — > CCC: indeed, 

-» -» 
^(C) : Q{ni) Q{n) is a strict morphism of ccc's (we know that (A x B)[C] = 

A[C] X B[C], (A ^ B)[C] = A[C] ^ B[C], we have to check that {o x t)[C] = 

cr[C] X t[C], (cr; t)[C] = cr[C]; t[C], etc.). And the composition coincides with 
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substitution: ^(C) o ^(C) = ^(C'[C]). 



One can also check easily that composing this functor with the forgetful 
functor ob : CCC — > Set gives us the representable functor B(-, 1). 

For what follows, we need an additional definition: 

Lemma 8 Let mbe a move in an arena H, such that H = (A — > B)[C/X]for some 
arenas A, B and C. Suppose that the origin ofm is a root of A (resp. ofB). Then there 
is a unique move m' in the arena (VX.A) — > B[C/X] (resp. A[C/X] — > (iX.B)) 
such that: 

• the arenas occurring in m' are the same as the ones occurring in m, plus the arena 
C 

• the resulting arena and the resulting nodes ofm and m' are the same. 
The move m' is called the abstraction ofm along A ^ B. 

Proof: Consider the case where m is played in B and suppose m = d[ci : 
A\lb\;A\lb\; . . .}AlJbl] . . . [c, : A'l/b'l; . . • ; A^y&,"J. We define Cq = originic^) 
and bo the quantifier of target Cq corresponding to VX in VXB. 

If X„+i ^ D{co), then m' = 0'[ci : C/fco; Aj/^J; . . • ; A^yfeiJ . . . [c„ : A^b"^; 
AlJb'll Otherwise, let c[ be the origin of Ci in = (A ^ B)[d{Xk)/Xk]k 
(i.e. before the substitution C/X). The quantifers among b\,...,b^^ which 
come from C are named b\, . . . ,b\ , the others are named b\,...,b\ . Let 

h 'pi h hji 

C2 be the origin of C2 in B^ = B^[A\/b\, . . . ,A\ /b\ ] {i.e.before the substitu- 

h '1 'pi 'pi 

tions A\ /b\, . . . , A\ /b\ ). The quantifers among b\, . .. , b^ which come from 

h h Iql lq\ ^ 

A\,.. .,A\ are named b\, .. .,b\ , the others are named b\, . ..,b\ , etc. By 

'\ 'pi '1 'p2 h Iq2 

iterating this process, we finally get to a node c\^ which is the origin of c„ 
before some substitutions A"" J • • • / A";i| lb"~}^ . The quantifers among 

h h lq(n-i) lq(n-i) 

b"..., b'l which come from A"7j , . . . , A"lJ are named b'.„ , the others 

'\ V(«-i) '1 

are named &",„.. .Ifpn = Othenm' = Q\c\ : C/bo;A\/b\;...;A\ /b\ ]...[c': 

h Ajn h h Iql Iql 

A"/b"; . . .;A]„ /b" ];if pn ^ Othenm' = d[c[ : C/bo;A\/b\; . . .;A\ /b\]. . . [c„ : 

h h ll'< J^l" ^ h h Iql Iql 

A'}Jb^;...;Al, /V}, ]. 

We let the reader check that the move defined above is in (A[C/X] — > (VXB). 
Note that this technical definition is just the natural way to define a node of 
A[B/X] ^ (VXB), starting from a move in A[B/X] ^ B[C/X]. 

The case where m is played in A is similar. □ 
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In the category B, the projection is X = (Xi, . . . , X„) : n + 1 — > n. It gives us 
a functor X* = Q{X) : Q{n) Q{n + 1). We have to find a right adjoint for X, 
and for this we introduce the notion of morphism quantification: 

Definition 26 (morphism quantification) Let ct : A — > B;Xi, . . . ,X„,X„+i. 
We define the strategy Va : (VX„+i.A) — > (VX„+i.B); Xi, . . .,X„as the set of plays 
"is for s e o, where Vs is defined from s via the following operations: 

• each initial move m = Om^ is replaced by m' = O'm'^, where 0'{Xi) = 0(X)t) 
for 1 <k <n, and m'^ is the abstraction ofms along (A — > B)[0(Xi)/Xi, . . . , 

eix„)/x„] 

• each move mA whose origin is a root of A is replaced by its abstraction along 
(A^B)[0(Xi)/Xi,...,0(X„)/X„]. 

Once again, we let the reader verify that if o is an innocent strategy, then Vcr 
is an innocent strategy. 

We can now define the functor n„ : Q{n + 1) ^ Q{n) by n„(A) = VX„+i.A 
and Yl„{a) = Vcr. 

Proposition 2 n„ is a right adjoint ofX*. 

Proof: We first have to establish for each C G Q{n) a bijection k : Q{n + 
1)(X-(C),A) ^ ^(n)(C, VX„+iA). We notice that X*(C) = C[X] = C. 

If cr : C A;Xi,. . .,X„,X„+i, k{o) = {k(s) | s e o}, where k(s) is obtained 
from s by replacing each initial move of the form m = dm^ by an initial move 
m' = e'm'^ in C ^ VX„+iA such that 0'(X;c) = 0(X^) = for 1 < < n, and m'^ is 
the abstraction of mo along C A[0(Xi)/Xi, . . . , 0(X„)/X„]. 

We finally just need to check the naturality of this bijection, namely that 
T;K{a) = K{X*{T);a) and k{t;o) = K{T);Il„{a). This comes directly from the 



Lemma 9 Tl„ is natural in n: Q{C) o n„ = n„; o Q{C,Xm+i). 

Proof: This is easy to check for objects: for A G Q{n + 1), the formulas rep- 
resenting respectively (VX„+i.A)[C] and VXm+i.A[C,X,„+i] are a-equivalent, 
hence the arenas are equal. 

On morphisms, this requires to check that (Vc7)[C] = V(cr[C, X,„+i]), which is 

-> 

easy because the substitution o cr[C] does only modify the 6 function of 
the initial moves. □ 



-» 



action of X* and n„ on strategies. 



□ 



One can now conclude, using the results of 
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Theorem 2 The structure M defined by the base category B and the functor 
Q : — > CCC is an hyperdoctrine, and therefore a model of system F. 

The interpretation of a type A in this model is a polymorphic arena A*, 
whereas the interpretation of a typing derivation ending with the judgement 

X; Xi : Ai, . . . , x„ : A„ h i : A is a strategy cTf : A* X . . . X A* ^ A*; X. 
3.6 Arena isomorphisms 

Before defining our control hyperdoctrine, we introduce the notions of arena 
isomorphisms and game isomorphisms that will be useful to define some 
structural morphisms. Note that these notions will become really important 
when dealing with type isomorphisms. 

There are two ways to define an isomorphism between arenas: it can be 
either an isomorphism using strategies, or a (trivial) geometrical equality 
between hyperforests. We prove here that the first notion of isomorphism is 
implied by the latter. 

Definition 27 (arena isomorphism) Let A and B two polymorphic arenas. We 
say that there is an arena isomorphism between A and B if there is a bijection 
g : Ea ^ Eb preserving the hyperforest structure: gCRA) = 'J^b iind Db ° g = 'Da- 
VSfe note this g : A B, or simply A -a B. 

Example 6: The arenas A = VX.VY((VZ.(± x Z) ^ X) x (VLT.LT)) ^ ± and 
B = (VXX) ^ (VY(VZ.± ^ Z ^ Y) ^ (VL7.±)) are isomorphic: indeed, they 
can be described by the following hyperforests: 




o 

Definition 28 (game isomorphism) Let A and B two polymorphic arenas. We 
say that there is a game isomorphism (o, t) between A and B (A -g B) if there are 

two strategies o : A ^ B;X and x : B — > A; X such that o;t = idA and t;o = ids. 
We note this (o, t) : A -g B, or simply A -gB. 

Proposition 3 Let A and B two polymorphic arenas such that A B. Then there 
is a game isomorphism {o,t) between A and B; moreover, o and t are central 
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strategies. 



Proof: We wish to extend the function g into a function on plays. 

First note that if g : A ^„ B then A[C/X,] ^„ B[C/X,] and, if G 'Ra, 
A[C/b] B[C/g(fc)]. We note g[C/X;] (or g[C/fc]) the function realizing 
this isomorphism. For a given move m = {6)[ci : A\l'b\; . . . ; A^^ jh^} . . .[Cp : 
A^/&^; . . . ; A|' /fc^ ] played in A (the notation (6) indicates that a 9 function 
may appear or not), we define g{m) = {d)[g^{ci) : Al/g^{b\); . . . ; A^ /gi(&^ )] 
...[gncp) : A\lgP{h\)-...-AygP{}f^)\ withgi = g[0(Xi)/Xi] . . . [0(X,)/X,] 
andg'+i = g%A'Jg%)'\{A^JgKh\)l 

We note g/m the function realizing the isomorphism between the resulting 
arenas of m and g{m) (i.e. g = g^'^^). For a given play s = mi,...m„, we 
define the functions by: gi = g and g^+i = gj/mj. Finally, we set ^(s) = 

glim) ■ . ■ gninin)- 

Consider o = {s e PfiA B) \ Vt even prefix ofs, t \a= g{t \b)} and t = 
{s G "PfiB ^ A) I Vi even prefix ofs, t \b= g{t \a)]- Then o and t are indeed 
central strategies from on A — > B and B — > A respectively, and they verify 
cr; T = id-A and t; cr = z'^b- 

The game isomorphisms we have constructed here will sometimes be called 
the trivial isomorphisms between A and B. □ 

The fundamental result of the third section of this article will be to prove 
that, in a certain submodel of this one, the converse of this proposition is 
also true. 



3.7 Construction of a control hyperdoctrine 

As we wish to establish that we have a model of the A/,t2-calculus and we 
already have a structure of hyperdoctrine, we need to recover the additional 
requirements of the section 2.2. The important part of the job will in fact 
consist in characterizing ^ as a binoidal functor, and distinguishing central 
morphisms. 

Let s be a justified sequence on A ^ B; we want to define a justified sequence 
s I A on A. The basic idea is the following: each node c in A ^ B "comes from" 
a node of A or B. s I a will consist of the part of s which comes from A. 

Formally, if s = e then s Ia= otherwise, let s = s'm with m = {d)[ci : 
A\lh\;. . .■,AlJbl^] . . . [c„ : A'l/b"^; . . . ; A^V^^ ■ AH the d are necessarily of the 
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same form: c, = (fl, ^ c'.) or c, = (fl,-,c^, 1) or c, = (c^,fl„2). 

• If c, = (fl, ^ cp, let p be the least i such that c^^^ = (z = n if this equality 
in never true), be the quantifiers appearing in A[{d{Xj)/Xj)j], and fc| 

(for 2 < I < p and 1 < m < km) be the quantifiers appearing in A^~^/bl~^, 

A\^^_^- then s \a= s' \a m' with m' = : ; . . • ; A^fc^J . . . K : 

A;Vfc?;...;Aj /vn 

'p »p »/cp '/cp 

• If c; = (fl„c;,l), s rA= s' U m' withm' = [fli : A\/bl;...;AlJbl^]...[a„ : 
Alibi,... ■,Allbl) 

• lid = {c\,ai,2),i\A=s' U- 

t \b is defined similarly. 

Example 7: Let us come back to the arena A and the initial move m of 
example 4. We have A = B ^ C, with B = VX3.(^± ^ X3) and C = 7X3.(^X2 ^ 
X3), m = 0[ci : Hi/bi,H2/b2][c' : H^/bs] with Ci = V(* ^ ^ V(* ^ 

^(0,*^*)) ^j^^ c' = c; = (★ ^ ★) ^ (★ ^ ★). 

If we consider the plays = m, one has s Ib= d[V{-k^x^°'*^*^) : Hi/fci][(*^*) : 
H3/fc3]ands Ib= [VC^^x^O'*"^*)) : H2/fc2][(*^*) :]. The reader can check that 
one has kept in s te the "left part" of the moves a^a', and every instantiation 
of a quantifier which is related to the "left part" of the arena A. o 

This definition is such that, for s justified sequence on A ^ B, one has s [a 
justified sequence on A. If s is a justified sequence on (A ^ C) — > (B ^ D), 
one can define as well s \a^b, composed of the moves of (s Ia^c) \a and the 
moves of (s \b^d) Ib- 

Proposition 4 Let t : C ^ D;X be a strategy, and a : A ^ B;X a central 
strategy. Leto^T = {se PjiHA ^ C) ^ (B ^ D)) | s Ia^b& o A s tc^D^ t}. 
T/zen T is a strategy. Ifo and t are innocent then t is innocent. Moreover, 
we have {o ^ idc); {ids ^ t) = {id a ^ t); (ct ^ ido). 

Proof: Once again we make use of the translation into propositional game 
semantics. We recall that, in propositional game semantics, the nodes of an 
arena A ^ B are denoted {aQ, bo) for roots, {a, bo, 1) for copies of nodes of A 
and (b, ao, 2) for copies of nodes of B. 

First, one can verify that [[cr]] is a central strategy (in the propositional game 
semantics) iff cr is a central strategy. 

The correspondence |[A ^ B]] = [AJ ^ |[B]] is true, but not completely trivial: 
actually, this is precisely given by the preceding definition: to each non- 
empty bi-view sm of A ^ B (which is a node of [[A ^ BJ) ending with the 
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move m, one associates a node /.i in [[A]] ^ \B\ by proceeding by cases: 

• if the nodes of m take the form (a, ^ fc,), then /.i = (sm f~A, sm ts) 

• if the nodes of m take the form 1), then = (sw \a, hi, 1) 

• if the nodes of m take the form {hi, Ui, 2), then = (sm ts/ iii, 2). 

This defines a bijection from the nodes of |[A ^ B]] to the nodes of |[A]] ^ [[BJ. 

By extending this correspondence to plays and sets of plays, one obtain, 
for each set o of plays on A ^ B, a set [[cr|" on [[A]] ^ [[BJ, and we have: 
Ul = ttcl" tiAi- For a strategy t : C — > D;X and a central strategy 
o : A ^ B;X, one has 

lo ^ tT = {M" I s e P^{{A ^C)^{B^D)As Ia^b^ o a s tc-oe t} 
= {se P^am ^ 1[C1) ^ (EBI ^ EDI) I s tM^pje Ecj]] 

As tici^iDje EtII 
= ttcTl;ETl 



No w we ca n refer to what has been done for propositional game seman- 



tics |Lau02[] and retrieve the expected results (thanks to lemmas 5 and 6): 
Ecr; tJ" is a strategy, so cr; t is a strategy If and t are innocent, then Ecr; tJ" is 
irmocent, so a; t is irmocent. Finally, Ka^idc); (z^b^t)]]" = E(A^t); (cj^D)]], 
so (cT ^ idc); {idB ^ x) = (A ^ t); (ct ^ D). □ 

Of course, x ^ cr for any x and a central cr is defined similarly. This gives us 
the following result: 

Proposition 5 In every category Q{n), ^ is a binoidal functor. Central morphisms 
for this structure are exactly central strategies. 

Proof: We define a ^ C = a ^ idc and o = idc ^ o. As l{a; x) ^ CJ = 
E(c7^C);(x^C)I and EC^(c7;x)l = E(C ^ a); (C^x)i^ is a binoidal functor. 

Moreover, 

o is central for the binoidal structure ^ Eo'F' is central for the 

(propositional) binoidal structure 
^ Eo'I" is a central strategy 
o cr is a central strategy 

□ 

Theorem 3 Mis a control hyper doctrine. 

Proof: For each n G IN, we define ^„ = ^ and A-„ = ±. 
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To construct the central isomorphisms flA,B,C/ ^a, '>'a, Ca,b, we use the fact that 
there are trivial arena isomorphisms between the arenas they bind together: 
for example, there is an arena isomorphism between (A ^ B) ^ C and A ^ 
(B^C), and flA,B,c is defined to be the corresponding game isomorphism. The 
reader can check the naturality of these isomorphisms and the commutation 
of associated diagrams. 

The symmetric monoid of an object A is defined in the following way: 

• Ia = {e}U{mm' \ m initial move of A Am' = (-i(*),c,„ 1) Ac,, last node of m} 

• Va = {s G P^(Ai^A2 ^ Ao) I < s with \t\ even , t Ui^AoS z^a U^Ao^ 
id a} 

The reader can check the innocence of these strategies and the commutativ- 
ity of the required diagrams. 

At this point, we have proved that A1 is a symmetric premonoidal hy- 
perdoctrine with codiagonals. A\ is also distributive: 7ii and 712 are focal, 
and (tt ^ C, 712 C) is the trivial isomorphism between (A x B) ^ C and 
(A ^ C) X (B ^ C), and the empty strategy is the trivial isomorphism between 
T ^ C = T and T. Checking naturality is left to the reader. 

Hypercentrality is easy to check: because of their definitions, k and 
preserve centrality. Besides, thanks to the way we have defined the substi- 
tution for an arena (through substitution of the formula) and for a strategy 
(through a simple operation on the 6 function), the specialization functors 
commute with ^; and the operation of substitution for strategies of course 
transforms trivial isomorphisms into trivial isomorphisms. 

Finally, Sa,b,c is the trivial isomorphism between (A — > B)^C and A (B^C) 

(because £a,b,c : (B^ ^ C) x A (B^ ^ C) x (A ^ C) ^ B ^ C is 

trivially equivalent to ev ^ C), and Pa,b is the trivial isomorphism between 
(VX„.(A ^ B) and VX„(A) ^ B (if X„ i FTViB)). One again, the naturality 
of Sa,b,c it^ C and the commutativity of additional diagrams are left to the 
reader. □ 



4 Characterization of isomorphisms 

Having defined our model, we would like to use it to characterize second- 
order type isomorphisms. Unfortunately, there are too many isomorphisms 
in our model: for example, there exists an isomorphism (ct,t) between VX._L 
and VXVY±. 
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Indeed, the set of closed arenas 'H is countable, hence there exists a bijection 
k : K ^ K xlH {k = (^1,^2))- Then the innocent strategy o : (VX.±) 
(VXVY-L) can be defined by its views, which take the form Sh,h' = [V(V(*)) : 
H/fci,H7fc2][(-(V(*)),V(V(*)),l) : k-\H,H')/bo]iorH,H' e W. Similarly, the 
innocent strategy x : (VXVY_L) — > (VX._L) can be defined by its views, which 
take the form tn = [V(*) : H/fco][(-(V(V(*))), V(*)), 1) : h{H)/hMH)/b2] 
for He'H. 

But the problem is, that this isomorphism does not exist in our language 

In order to characterize type isomorphisms more precisely, we will introduce 
a new property, called uniformity, which tends to move the model nearer 
to the behavior of A/,i2 itself. In particular, this property will break down the 
high level of symmetry between P and O (as it is the case for innocence). 



4.1 Uniformity 



Definition 29 (rank) Let s G P;^{A) and m a move ofs which takes the form 
m =(0)[ci : Al/b\; . . • ; A^y^^J, , [c, : Ayb'l; 

For each occurrence Hofa closed arena in m(H = A-', for some (i, j) or H = 0(X,) 
for some Xj), we define the rank ofH, denoted rankm{H), b"^ 



• ifH = 0{Xi)for some X; eX,orH = A', with bl quantifier of the arena where 
m is played, then rankm{H) = 1 

• ifH = a', where b\ is an quantifier of a closed arena H' occurring in m before 
H, then rankm{H) = rankm{H') + 1. 

Definition 30 (paths and instantiation traces) Let s G Pf{A). For every move 
m ofs, we define: 

• the path ofm:m = ci... Cn 

• the instantiation traces ofm: m = Bi . . .Bp is the sequence of occurrences 
of arenas Bj appearing in m such that rankm{Bi) < i. 

We note C the set of paths and I the set of instantiation traces. lfs = m\... m,-, we 
note s = mi . . . m,. {refis implicit in s) and s' = ml' . . . Wj for j G N. 



^ It exists in Curry-style system F, but our language is defined in the Church-style. 
^ Note that if m is not an initial move, then rankm{Al) = 
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The path of m is the description of the move without looking at the instan- 
tiated arenas. Instantiations traces are the sequences of arenas effectively 
instantiated. The existence of many instantiation traces depending on the 
node is required by the proof of theorem 5. 

Beside the set X of variable names that can be used as parameters, we put 
another set J/ = {C, | i G N} where the C,'s will represent holes, whose 
destiny is to be replaced by a closed arena. 

Definition 31 (arenas with holes) An arena with holes is a polymorphic arena 
built on the set of free variables Xu }/. The set of arenas with holes will be denoted 
7C. 

Remark: This definition means that, to define arenas with holes, we extend 
the grammar of nodes with the variables c, for z G IN. 

Definition 32 (uniform strategy) A strategy o : A;X is called uniform if there 
exists a partial function f : C* ^ C*, and a sequence of functions f i, . . . ,f„, • • • : 
C* — > TC* such that, if s e o and sm play in A, then: smm' & o if and only if 

smm' = /(sm) and m'' = Fi (sm) \srn] for every i G N. 

The notation Fi(sm)\sm] means that the sequence of closed arenas m'' is 
obtained first by building the sequence f ,(sm) of arenas with holes, then by 
applying the substitution [Wn{l)/Ci,...,sm{p)/Cp] in these arenas, where 

sm{k) stands for the A:th arena occurring in sm (and p is the length of this 
sequence). 

This way, the arenas with holes cannot depend on already instantiated 
arenas: these ones can only fill the holes to generate the arenas for the 
following moves. This corresponds to the fact that, in a term of A[i2, P does 
not have a direct access to the instantiation of types by O, he can only reuse 
them (think about the term AX.Ax^^^.xjX — > _L} for example). Likewise, via 
the function / we see that the paths of the moves of P in a uniform strategy 
do not depend on already instantiated arenas, but only on the names of 
already played moves. 

Note also that the functions /, f i, . . . , f „, . . . suffice to recover the uniform 
strategy o. This defi nition o f uniform strategies is inspired by the work of 
Murawski and Ong 



Example 8: Let us go back to the play described in example 5. This play 
belongs to a strategy o which is the interpretation of a A/j2 term. As we shall 
prove further, this implies that o is uniform. 

We are interested by the two first moves of this play: mi = 0[a : H' lbi;Hlb^\ 
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and m2 = [b : H' /b2][g' : H" lhi\{h' :]. The property of uniformity implies 
that: 

• the choice of the nodes h, g' , h' only depends on the choice of a by Oppo- 
nent: f{a) = a ■ hg'h' 

• the closed arenas H' and H" are determined by two arenas with holes 
Gi = fi(fl) and G2 = f2(«)/ and we have Gi[HVCi,H/C2] = H' and 
G2[H7Ci,H/C2] = H"; actually, Gi is simply H' and G2 = C2 ^ ±. 

The interest of this example lies in the comparison with the term t = 
AZ.AX.Ax'^^-^.Au^.Av^.{x\\/U.U}{X ±})u interpreted by a. Indeed, the are- 
nas with holes Gi and G2 can in fact be read directly off this term: they 
correspond to the instantiations by VLILf and X — » _L. This case is actually a 
bit more simple than the definition, because each arena played by mi is of 
rank 1. o 

The above definition of uniformity is not very convenient for its use in our 
proofs. That is why we introduce a lemma giving a very useful and widely 
used consequence of uniformity 

Lemma 10 Let sea with o uniform. Let m e she such that A(m) = O and H/bj 
be one of its instantiations. Suppose that each node ofH played during s is a root 
ofH. Then, ifH' is an arena whose roots have the same names as the roots ofH, we 
have s' e o, where s' is the play s modified in the following way: first, the node m is 
replaced by m' , which is identical to m except that it instantiates bj by H'; second, 
each time an arena with holes does a reference to H, we give H' instead. We have, 
in particular, s = s^ 

Proof: We set s = Sims2. By induction on the length of S2: 

• if S2 = mi, we have Sim = Sim' and we can conclude thanks to uniformity 

• if §2 = mi . . . m„ with n > 3, we have by induction hypothesis: 

Simmi . . . m„_2 = S\mm'^ . . . m'^_2 (where m^ is the move corresponding to 
mi in s'); besides m^_^ = m„_i, so Simmi . . . m„_i = Simm^ . . . m^ ^, and 
we can conclude thanks to uniformity. 

□ 



4.2 The uniform model 

Our goal in this section is to prove that, by restricting the model to uniform 
strategies, we still obtain a control hyperdoctrtne, whose structural objects 
are actually the same as in the original model. We first check that the basic 
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operations on strategies preserve uniformity: 

Proposition 6Ifo and x are uniform and A is an arena, then o xz, A, o 
and o; t are uniform. 

Proof: Preservation of uniformity through X is trivial. For ^, we recall that 
o^A = \se P^{{B ^A)^{C^A))\ s \b^c^ (7 a s \a^a& idA]: hence, if one 

can rebuild sm \b^c from s \b^c and sm \b^c from s \b^c , one can rebuild 
sm from s and sm' from s'. 



Let us focus our attention on composition. 



Let /, f 1, . . . , f ,„ . . . and /', f . . . , f . . . be the functions associated respec- 
tively with o and x. Let smn G o;t, we know that smn = u Ia,c with 
u G int{A,B,C), u Ia,b^ o and u \b,c^ t. Besides, as the strategy is inno- 
cent, we can ask smn to be a thread. Finally, we note s' = smn. 

Starting from a uniform strategy p, if we define p = {s | s G p}, we can see 
that, thanks to uniformity, p is a strategy in a propositional setting. Thus we 
obtain two strategies q_ and t, which interact to give the play s' in p articula r. 



So we can use the Zipping lemma in the propositional setting (cf. ||Har99[1 ) 
to conclude that we can reconstruct u starting from 

This gives us a partial function go such that u = go{s^) (this function will be 
defined on s' if and only if we can reconstruct a finite sequence u starting 
from s^). It is then easy to construct another partial function g so that = 

Suppose now that n is in A (the case of n being in C can be treated exactly 
the same way), and note u' the prefix of u whose last move is m. We know 
that n' = Fi{so)[so], where Sq = u' \a,b- As we can calculate Sq starting from 

this gives us n = H,(s^)[so ]. As Sq is contained in u', we haven = H'(s^)[m' ]. 
We will now prove in the following that we can keep this relation while 
suppressing from u' the moves played in B, one after the other. 

Let mo be the last move in u' played in B and let us write u' = s'QmQU2. mo is 
played by P for a or for t. Suppose it is for t (the other case is equivalent): 

then we have mo' = F'.{s'^{s'q ], so = f ■'(s^)[Sq ] for some function f Note 

that formally mo' may differ if we consider cr or t (because of the 6 function), 
but it has no practical effect thanks to the definition of restriction (the 6 
functions are the same in plays of cr as in plays of t). We now replace the 
sequence of arenas with holes H,(s^) by the adequate sequence of arenas 
with holes (i.e. where the arenas of F"{£) are placed in the corresponding 
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holes), and we get n = H'.'{s2)[Sq ], where Sg is obtained by suppressing mo 
from u'. 

We have succeeded in suppressing the last move of u' which is played in B, 
we can proceed iteratively until we only have moves played in A or C. This 

will give us a function G, such that Ti = G,(s^)[s'']. □ 

Proposition 7 Let X = (Xi, . . . , X„) and C = (Ci, . . . , C„) where the free variables 

in Ci, . . . , C„ are chosen between Yi, . . . , Ym- If o '■ A;X is uniform then o[C] : 
-» -> 

A[C/X]; Y is uniform. 

Let A, C G g{n + l\De g{n) and X = Xi, . . . , X„. Ifo : F(X)(C) ^ A; X, X„+i 
is uniform then k{o) : C — > VX„+i.A;X zs uniform. 7/t : D — > VX„+i.A;X zs 
uniform then k" (t) : D — > A;X,X,j+i zs uniform. 

Ifo : A — > B;X,X„+i zs uniform then Vcr : (VX„+i.A) — > (VX„+i.B);X zs uniform. 

Proof: In each case, it suffices to do a slight update of the functions related 
to the first uniform strategy to obtain the new one. Note that this would not 
work for k, k"^ and cr i—> Vcr if we had not introduced the notion of rank: 
indeed, the rank is preserved through abstraction. □ 

It is easy to see that each base strategy is uniform: 

Lemma 11 If A,B,C e Q{k), then the following strategies are uniform: e : T, 

idA : A A;X,Aa : A AxA;XandnA : AxB A;X,aA,B,c ■ (A^B)^C 
A^iB^C)jA:A^A^±,rA:A^±^A,iA:-L^AWA:A^A^A, 
dA,B,c ■■ (A^QxiB'^C) {AxB)'^C,Sa,b,c : (B ^ A)^C ^ ((B^C) ^ A), 

CIS XOSl-l- CIS ^ g ^/ ^ f ^ j\ ' ^ j\ B C B C* 

The control hyperdoctrine Ai was characterized by its base strategies, which 
are uniform, and its fundamental operations, which preserve uniformity. 
This leads us to the following: 

Theorem ^ If we restrain each category Q{k) to the subcategory Qu„if{k) where 
every strategy is uniform, we obtain a new control hyperdoctrine Munif- 

This model is much less symmetric and comfortable than the first one we 
introduced, that is why we introduced it only in a second time. But the 
symmetric model At is too liberal to allow us to deal properly with type 
isomorphisms; so, uniformity is an ad hoc property to constrain the model 
in such a way that we do not have more type isomorphisms in the model 
Aiunif than in A/j2, as we will see right now. 
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4.3 Isomorphisms in the model 



We are now ready to prove the fundamental result of our work on type 
isomorphisms: this is essentially the converse of the proposition 3. All this 
section is dedicated to the proof of this theorem. 

Theorem 5 If there exists a game isomorphism {o, x) between two polymorphic 
arenas A and B, with a, x uniform and innocent, then A and B are isomorphic. 



Proof: The same result has been proved in a propositional setting in [LauOSl] : 
the tricky part in our case is that moves are not only nodes of a forest, but 
contain all the second-order structure. However, we may reuse the results 
of Olivier Laurent to do one part of the work. 

Zig-zag plays: 

Definition 33 (zig-zag play) A play s of A B is said to be zig-zag if 

• each Player move following an Opponent move played in A (resp. in B) is 
played in B (resp. in A) 

• each Player move played in A which follows an Opponent initial move played 
in B is justified by it 

• s \a i^nd s \b have the same pointers. 

If s is a zig-zag even-length play on A ^ B, we note s the unique zig-zag play on 
B — > A such that s \a= s \a md s \b= s \b- 

We also give the definition of totality, which coincides with the usual notion: 

Definition 34 (totality) Let o : A;X. We say that a is total if whenever sea 
and sm e Vf{A), there exists a move m' such that smm' G o. 

Lemma 12 If there is a game isomorphism {o, x) between A and B then: 

• every play ofoorz is zig-zag 

• X = {s I s G cr} 

• o and X are total. 

This lemma can be proved by using forth and back translation to the propo- 
sitional setting, as it has been defined in section 3.4. Ind eed, as the lemma 
has been proved for the propositional setting in |Lau05|l , all we need is to 
check the following: 

• if (cr, x) defines an isomorphism between A and B then ([[cjI', [[x]]') defines 
an isomorphism between [[A]] and \B\ 

• if \s\' is zig-zag then s is zig-zag 
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• if 1[t]1 = {s I s G [[a]]} then t = {s | s G a} 

• if |[cr]] is total then o is total 

Given these preliminary results, we are ready to build the bijection g : 
Ea — > Eg as a morphism for the whole structure of arenas: in order to do 
that, we will build g together with a bijection W : 'Ra ^ 'Rb such that 
g{T{b)) = T{W{b)) for all b e ^a, and then prove that g{S{b)) = S{W{b)) and 
finally that 2)a(c) = £>B(g(c)) for all c e Ea. 

Construction of the bijection g: 

Suppose that the uniform strategies a and t are determined respectively by 

the functions /, f i, . . . , f „, . . . and /', f ^, . . . , f '„ Consider an arena Q and 

a play (in a propositional setting) s = mi . . . m„ on the forest 'Fq = (Eg, <q); 
we can associate to this play a second-order play [s] = [mi] . . . [m„] on Q 
where each move [m,] consists in playing the node m, (or the node replacing 
nii) and instantiating each quantifier by -L (for an initial move, this also 
means that 6{Xj) = _L for each Xy). This means that this move will be written 
[mi] = [m; : ±/bi^; . . . ±/&,J or [m,] = [m\ : ±/bi^; . . . ±/biJ[m'/ :] where m'. and 
m" can be either m, or a node of the form mi[a'{x)/x]xev{mi)/ whose origin is 
m,. 

Let be a node of A and ai . . .Uphe the sequence of nodes of A such that fli 
is a root, fl/+i son of fl, for 1 < z < p - 1 and Up = a. By induction on p, we will 
define a function g from the nodes of A to the nodes of B and prove thaE: 

• if = [g(fli)][fli][fl2][g(«2)][g(«3)][«3] • • • then Sa e o 

• there exists a bijection \p between the quantifiers fc, such that T{bi) = Up 
and the quantifiers b'. such that 7~(fcp = g(flp), and we have : if s;^ 
and s'^ are respectively the plays and s,^ where the last move has 
been suppressed, fi(s^) = (Cr(,)),6[i,n] where r{i) is the index associated 
with b'^^j^ (or i.e. the index of the arena which instantiates this 
quantifier, and F'^{s[) = (C/(,));e[i,„] where is the index associated with 

brHi) (or b'^i))- 

Note that the functions g and i/^ should depend on a and be written g„ and 
i/^fl. But actually, by construction, we see that if a' is an ancestor of a, then 
gaii' = S'fl'(fl') = S'(«')/ and the same holds for ip. 



If p = it suffices to say that e e a and e e t. 



For a better understanding of this assertion, we recall that the arena C,- is the 
arena reduced to a node C;. 
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If p = p' + 1 we note Si = [fli][g(fli)][g(fl2)][fl2]-[g(flp')]K'] ^ 
and $2 = [g{ai)][ai\[a2\[g{a2)]...[ap'][g{ap>)] e a. We choose the unique move 
m played in B such that Si [flp]m G t (it exists by totality of t) and we set 
g(flp) = ongin{m). Let bi,...,bn be the quantifiers such that T'(&,) = fl and 
b[,..., h'^, the quantifiers such that T{h\) = ^^(flp). 

By uniformity of z, we have = F^(si[flp])[Si] where Si stands for some 

substitution of holes and variables. As we have S2m[ap] e o, we also get, 
from the uniformity of o, 

1 

[flp] =Fi(s2m)[S2] (★) 

where S2 stands for some substitution of holes and variables. We note 
f i(s2m) = Gi . . . G„ and f ^(si[flp]) = . . . G^, and we are interested in G, 

for a given i. We know that Gj[S2] = J- from (★). 

Let a' be the move obtained from [flp] by instantiating hi by Hi = -iH instead 
of -L, where H is a non-empty closed arena. Then Hi has the same root as 
-L. We have = [Up], so Sia'm' € t and S2m'a' G a, with m^ = m thanks to 

lemma 10. This gives a'^ = Fi{s2m'){S'r^ = f i(s2m)[S2] {S[ and S2 are the new 
substitutions obtained with the new instantiation). In particular. Hi = G, [S2]. 

At this point, we have proved on one side ± = G/[S2] and on the other side 

Hi = G,[S2]. As Hi ^ _L and S2 can only us^ closed arenas from S2m' (and 
2 

not from S2m' ). This means that G; must contain a hole Q referring to an 

arena from (or m'^), because otherwise we should have G,[S2] = G,[S2] 
(indeed, the instantiation of fc, by Hi instead of -L does not affect the closed 
arenas from S2 , it affects only m ). But if, for each value I satisfying this 
property, G[ does not contain the hole C/(,) (where is the index of the arena 
which instantiates hi in Si[flp]m), then G[[Si] = GJ[S^], and so G,[S2] = G![S2] 
(S2 and S2 can only be differentiated by the arenas G|[Si] and G[[Sj]), which 
is absurd. We then have at least one value of / such that Gi contains the hole 
C/ and G'j contains the hole C/(,). 

It is then easy to see that G[ = C/(,) : indeed, if G| contained anything else than 
the node C/(;), G|[Si] would strictly contain _L (because none of the arenas it 
can refer to is empty), and G,[S2] = J- would also strictly contain _L. 

This proves that n' > n, and that we have an injection from the quantifiers 
to the h'. quantifiers. To show that n > n', we will use nearly the same 

^ This is where it is important to use functions F, indexed by the rank: if we could 

2 

use some arenas from S2ni' for example, then we could not conclude anything 
concerning the arenas appearing in m'^, and we could not prove that n - n'. 
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reasoning but in the other direction. 

Let j G [l,n'], we call K the closed arena by which m instantiates b'^, i.e. 
K = G'.[S^]. Let m' be the move obtained from m by instantiating b'. by Ki 
instead of K, where Ki must have the same roots as X but must be distinct 
from K (note that if K is empty we can choose Ki = _L). Then = m, so 
that we have SztWa" e a and Sia"m" e x with = [Up] thanks to lemma 10. 

So, m^^ = F\ {sia")[S';] = F[{sM)[S'{] {S'{ and S'^ are the new substitutions 
obtained with the new instantiation). In particular, Ki = G'.[S"]. 

At this point, we have on one side K = G'.[Si] and on the other side Ki = 
G'j[S"]. We also know that K ^ Ki, and S" can only use arenas from Sia"^, 
so G'j contains at least one hole C,. which refers to an arena from [a] (or 

a"^) : indeed, the instantiation of b'. by Ki instead of K does not affect the 

I — 1 

closed arenas from Si , it only affects [a] . But if, for any value of r satisfying 

this property, G,. does not contain the hole Cr{j) (where r{j) is the index of 

the arena which instantiates b'. in S2m[ap]), then = G,-[S2], and so 

Gj[S"] = Gj.[Si] which is absurd. We finally have at least one value of r such 

that G'j contains the hole and G,- contains the hole Cr(y). 

To see that G,- = C,-(y), one must first define a move Mq which is identical 
to tn except that it does not instantiate any of its quantifiers by the empty 
arena (it puts -L instead, for example). This can modify K, but it does not 
modify the paths, so that, thanks to uniformity, we still have Sawto^o € o arid 
SiUomo e t, with Uq = [a]. Let 5° and 5° be the new substitutions obtained 
with the new instantiation. If Gy contained anything else than the hole Cr(j), 
then Gr[S2] would strictly contain K (because none of the other arenas it can 
refer to is empty), and Gj.[S5] = K would strictly contain K. 

Finally, we obtain a bijection \p between the b/s and the b'-'s ; m instantiates 
each of its quantifiers to _L, so m = [g(flp)], and we have Fi(s2m) = (Cr(,)),e[i,„] 
where r{i) is the index associated with b'^^^, and F^(si[flp]) = (C;(,)),g[i,„] where 

is the index associated with 

The case p =p' + l with p' odd can be treated exactly the same way, switching 
the roles of o and t. 



It is now easy to associate a function g' to a as we have associated a function 
g to T. By construction, g and g' respect filiation (because of the property 
on zig-zag plays concerning pointers). We can easily check that g ° g' is the 
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identity on the nodes of A, and o g is the identity on the nodes of B : this 
directly comes from the fact that [g(fli)][fli][fl2][s^(^Z2)][s^(^Z3)][^Z3] ■■■ ^ o and 
[fli][g(fli)][g(fl2)][fl2][«3][g(«3)] •••ex. 

Proof of g{%A) = and Db o g = Da: 

The construction of the bijection W : 'Ra ^ 'Rb such that giT{b)) = T{W{b)) 
for all b G 'Ra is directly given by the function ijj. What remains to be proved 
is the following : if Up appears n times in S{bj) then g(flp) appears n times in 
S{ip{bj)), and if Up is decorated n times by Xk then g{ap) is also decorated n 
times by Xk. 

Suppose that Up appears n times in S{bj) whereas g{ap) appears n' times in 
S{^p{bj)) with for example n' < n. Let us consider the plays Si = 
[g{a2)][a2]-[g{ap)][ap] e x and S2 = [g(fli)][fli][fl2][g(fl2)]-[flp][g(flp)] e o (here, 
p has been chosen even, but of course all this still holds for p odd), and take 
a play s' nearly identical to S2 but for which bj has been instantiated by the 
closed arena H = -1-1 . . . -i_L, which is a string of length N (i.e. a tree of depth 
N where each node has at most one son). Thanks to lemma 10, this play is 
still in a. Besides, we note that, if g{ap) 6 S{br) (with b,- ip{bj)) or if g{ap) 
is decorated by X,., then b^ or X,. is still instantiated by _L in s' : indeed, the 
instantiation of b,. is given by the arena with holes C^-i(;,,,) (and xp'^ibr) is still 
instantiated by -L), and the instantiation of X^ is given by a function which 
instantiates every variable by -L. So, in the play s' the last move played is 
still [g{ap)], or [g(flp)]' {[g{ap)Y is just the move [g(flp)] where ip{bj) has been 
instantiated by H: it is the case T{bj) = a) : we note this move [5^(flp)]o- For 
simplicity of notations, we will consider from now that Up does not appear 
in any other set of the form S{bk), with k ], and is not decorated by any 
variable X^. The reader can easily check that this point does not change 
anything in the following, because each b^, k ^ and each variable X^, are 
instantiated by -L. 

Let us note Ci, . . . , Cjv the successive nodes of the string H (ci = c). The play 
s' can be written s' = ^[«p]o[s^('^p)]o {[^p]o is either [Up], either the move which 
consists in playing [Up] by instantiating bj by H, in the case 7~(&y) = a), and 
we have ^[g(flp)]o[«p]o € x. The instantiations by H generate n strings on one 
side and n' strings on the other side: let us simply call the nodes of these 
strings {Up - C2, i), {cip - C3, i), {Up - c^, i), for 1 < z < n, on one side, and 
{g{ap) - C2, ;■), (g(flp) - C3, ;■), . . . , {g{ap) - Cn, /), for 1 < / < n' , on the other 
side. Actually, these nodes correspond to "copies" of the nodes Ci,. . .,c„, 
and they are such that \quant{{ap - Cj, = \quant{Cj)\ = (this can be proved 
for the substitution D 1— > D[H/b] by an induction on D). 

For each 1 < i < n, i[g(flp)]o[^Zp]o(^Zp - C2, e V^iB A), so that we have 
t[g{ap)]o[ap]o{ap - C2, i)nii e x for some move Wj, and Wj is justified by [g(flp)]o 
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(this is the property of zig-zag plays concerning pointers). Besides, the 
moves m, must be pairwise distinct because t[ap]Q[g{ap)]omi{ap - C2,i) e o ; 
but the node g(flp) has been substituted by ^"^^H, so there is one value for i 
such that the origin of m is a son of g{ap) in the initial arena. Indeed, there are 
only n' other alternatives, namely the moves {g{ap) - Ci, /) for 1 < j < n'. 

This implies that g(flp) has at least one son in the initial arena : the idea of the 
proof is to show that there is behind g(flp) a branch of length at least equal 
to N : this will lead us to a contradiction if we have chosen N big enough at 
the beginning (choose for example n = h{A) + 1, where h{A) is the maximal 
depth of A). 

Aswehave t[g{ap)]o[ap]o{ap - C2, i)m e T,we also get t[ap]o[g{ap)]om{ap - C2, i) e 
o and, as t[ap]o[g{ap)]oni{apC2,i){apC3,i) 6 !P^(A B), we have ^[flp]o[g(«p)]o 
m{apC2, i){ap - C3, z)m' G o for some move m', justified by m and played in B. 
But be careful : this time, the origin of m, say d, may have been substituted by 
-L or by H, so the move m' is not necessarily played in the initial arena : it can 
be a move (d - C2, r), played in the arena substituted for d and corresponding 
to the node C2 in H. In fact, we will show further that this case, which we call 
a trapped substitution, leads to a contradiction. Finally, one could think 
that an quantifier may have d as target, and this would lead to another 
substitution, by something else than _L or H ; but actually it suffices to reuse 
the arguments explained many times before to show, thanks to uniformity, 
that there cannot exist more quantifiers having d for target than having 
(flp - C2, i) for target. As \quant{{ap - C2, i))\ = this case is impossible. 

We can thus go on with our proof : origin{m') is a son of origin{m). We have 
t[g{ap)]o[ap]o{ap-C2, i)mm'{apC3, i) e x, and i[g{ap)]o[ap]o{ap-C2, i)mm'{apC3, i){ap- 
C4, i) G Pf{B A), so t[g{ap)]o[ap]o{ap - C2, i)mm'{ap - C3, i){ap - C4, i)m" G t for 
some move m" justified by m' , etc. So, by systematically rejecting trapped 
substitutions, we show that we can construct a branch of length N descend- 
ing from g{ap). This leads to a contradiction, if we have chosen N big enough 
at the beginning. 

We still have to show the impossibility of trapped substitutions : suppose 
that i[flp]o[g(flp)]oWo(flp - C2, i){ap, C3 - i)mim2 . . . {ap - c^, z)(flp - Ck+i, i)mi G o (or, 
equivalently, ^[g(flp)]o[«p]o(flp - C2, i)momi{ap - C3, i){ap - C4, ■ • ■ i^p - Ck, i){ap - 
Ck+i,i)mi G t) with k > 2 and nti = (d - C2,r) where d = origin(m/_i). This 
would correspond to the case where one of the descendants of g{ap) belongs 
to S{ip{bj)), and we have then played in the substituted arena. In this case, 
we have t[ap]o[g{ap)]omo{ap - C2, i){ap - C3, i)mim2 ...{ap- Ck, i){ap - c^i, i)m{d - 
C3,r) G P^{A B), so t[ap]o[g{ap)]omo{ap-C2,i){ap-C3,i)mim2...{ap-Ck,i){ap- 
Ck+i, i)mi{d - C3, r){ap - Ck+2, i) G cr by totality (because (flp - Ck+2, i), if it exists, 
is the only son of (flp - Ck+iJ)). So %(flp)]o[flp]o(flp - C2, i)momi{ap - C3,i){ap - 
C4, i) ... (flp -Cjc+2, i){d-C3, r) G t, and, by the same arguments, ^[g(flp)]o['^p]o('^p ~ 



50 



C2, z)momi(flp - C3, 0(flp - C4, • • • («p - Ck+2, i){d - C3, r)((l - C4, r)(flp - 0^+3, z) e t, 
etc. Finally, ask >2, we necessarily come to a contradiction, namely looking 
for a son of Cjv, which does not have any by construction. 



We have proved that if Up appears n times in S{bj) then g{ap) appears n times 
in G S{ip{bj)). We still should show that if Up is decorated n times by Xy then 
giup) is decorated n times by Xj. But actually we see immediately that the 
arguments are exactly the same : here, it suffices to consider the plays Si and 
§2 with a new function 6' which instantiates each variable by -L, except Xj 
which is instantiated by H. By lemma 10 we still obtain a play from o or t, 
and we can follow the preceding proof without any trouble. □ 



4.4 Isomorphisms of types 



Thanks to the preceding result, and to the fact that we have a model of A[i2, 
we are able to characterize precisely type isomorphisms in this system. The 
equational system we want to establish for type isomorphisms in A[^2 has 
been presented on figure 4. 

On the grammar of A/,z2 types, we consider: 

n n 

• products of arity n: Y[Mi = ((Mi x M2) x . . . ) x M„ (HM = T if n = 0) 

1=1 i=l 

n n 

• disjunctions of arity n: ^Mi = ((Mi ^ M2) ^ . . . ) ^ M„ (^M, = ± if n = 0) 

!=1 ^ ;=1 

• quantifications of arity n: VX^ = VXjj . . . VX;^ if M = {z'l, . . . , in}. 



Inspired by the work of Roberto Di Cosmo on system F types |DC95|1 , we 
define normal forms: 

Definition 35 (canonical form) A second order type N is called a canonical 

n ^ m 

form if it is written N = nVXM,.Nj — > a, with at = ^Xk. and Ni canonical form. 

i=i ' 7=1 ' 

Lemma 13 Let A be a type in AjU2. There exists a canonical form A' such that 
A A'. 

Proof : Because of the associativity of x, ^ and V in we can restrict our- 
selves to products, disjunction and quantifications of arity n. Then, modulo 
a-equivalence, canonical forms are the normal forms of the following rewrit- 
ing system: 
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±^A^A 
T^A^T 
A^T 
AxT ^ A 
TxA^ A 
A ^ T => T 

This rewriting system is coherent with this means that if A => A' then 
A -£ A'. To show that this system terminates, we define a function \p which 
associates to each second order type A a natural number il>{A) > 2: 

ip{A xB) = i/^(A) + 4j{B) + 1 

i/^(VX.A) = lipiA) 
ip{A ^B) = ip{A)ilj{B) + 1 

xp{A ^ B) = 2'^'^)'^(^) 
i/^(T) = ipi±) = xpiY) = 2 

where Y stands for any type variable. 

For each rewriting rule A => A', we have i/^(A) > ip{A'). □ 

Proposition 8 If A and B are two types built on the grammar ofA[j.2 such that A* 
and B* are isomorphic, then A B. 

Proof: In this proof we are interested by the hyperf orest structure of A* and 
B* rather than their arborescence. 

Let g and xjj be the bijections which characterize the isomorphism between A* 
and B*. Suppose that A and B are already in a canonical form, we will show 
that these two forms are equal modulo -£ by induction on the structure of 
A*: 

• If A* is empty, then B* is empty and A* B*. 

• If A* is a tree such that no hyperedge has the root as target, then B* 
is a tree such that no hyperedge has the root as target. Then A 

A' (X/j ^ . . . XiJ (this is indeed the only normal form which can be 
interpreted by such a tree) with X, free type variable and we have in 



{AxB)^C^ {A'^B)x{B^C) 
{A^B)^C^A^ {B^Q 
A^{BxC)^{A^B)x{A^C) 
A ^ {B ^ C) ^ {Ax B) ^ C 

(VXA) ^ B ^ VX.(A ^ B) 
VX.(A X B) ^ (VXA) X (VXB) 
A ^ VXB ^ VX.(A ^ B) 
VX.T => T 
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this case, because of the bijection g which sends Da to Vb, B B' — > 
(X;_^(jj ^ . . . X;;_(,,j) where a is a permutation of {1, ... , n}. We obtain (A')* 
(resp. {B'Y) by suppressing the root from A* (resp from B*), so (A')* 
and {B'Y are isomorphic. Finally, by induction hypothesis. A' B' , so 
A B. 

• if A* is a tree (whose root is denoted r) with some hyperedges bi,...,bn 
such that 7~(fc;) = r for / G [l,n], then B* is also a tree (whose root is 
denoted r') with some hyperedges b[,...,b'„ such that Tib'.) = r for 
; G [l,n]. Then we have A VXi . . . 'iX„.A' (this is the only possible 
representation by a normal form) and B VX^ . . . VX^.B', where each 
Xk is associated with some bi and each X' is associated with some b'. 
(the variables X, and X'. are chosen fresh with respect to other free vari- 
ables already occurring in A and B). By a-renaming, we can choose the 
variables X[. such that: if X^ is the variable associated to the hyperedge 
bi, then the variable associated to ipibi) is X^. (A')* (resp. (B')*) is ob- 
tained from A* (resp. B*) by suppressing all hyperedges fci, . . . , fc„ (resp. 
b[,..., b'n) and by decorating with X; each node c such that c G iS(fc,) 
(resp. c G <S(fcp). By using the property S o ip = g o S, we see that (A')* 
and (B')* are isomorphic, so A' -g B' and finally A -g B by commuta- 
tivity of quantifications. 

• If A* contains k > 2 trees, then B* also contains k > 2 trees and A is 
obtained from k formulas Ai, . . .,Ak by using the connector x, so by 
associativity A ((Ai x A2) x Ak-i) x A/c, where each A* is a tree of A* 
(this is indeed the only representation by a normal form). In the same 
way, we have ((Bi x B2) x B)t-i) x Bj; where each |[B,]] is a tree of [[B]]. 
As A* and B* are isomorphic, one can find a permutation of the trees 
of A* such that, for every 1 < i < k, A*^^.^ and B* are isomorphic. By 
induction hypothesis, this implies A^(,) B„ so by commutativity of X 
we have A B. 



Theorem 6 Two formulas A and B are isomorphic in A[i2 if and only if A B 
(with -£ defined on figure 2 p. 4). 

Proof: If A B then A and B are isomorphic in the A/,i2-calculus: to prove 
it we just have to give a couple of terms realizing the isomorphism. As an 
example we give the isomorphism between A ^ (B ^ C) and (A ^ B) ^ C: 



□ 



h f : A ^ (B ^ C) ^ (A ^ B) ^ C 
h u : (A ^ B) ^ C ^ A ^ (B ^ C) 



with 
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and 



For the other implication, suppose there are two terms u : A ^ B and 
V : B ^ A such that u ov = ids and v o u = id a- In the uniform model, their 
respective interpretations cr„ and are such that o-o', cr„ = and cr„; o-o = idA- 
We then have a game isomorphism between the arenas A* and B*, so A* and 
B* are isomorphic, so that A B. □ 

Corollary 1 2f we consider the system A[i2' obtained by suppressing the construc- 
tors [«,j6]f and ii{a^ ,p^).t from the grammar of terms (as well as their associated 
inference rules and reduction rules) and the constructor from the grammar of 
types, then type isomorphisms in XjiT are characterized by the equational system 
^£ given on figure 4. 



AxB^' BxA AXT ^'A VX.VY.A VY.VX.A 

A X (B X C) (A X B) X C VX.T T VX.(A x B) VXA x VXB 

A ^ (B ^ C) (A X B) ^ C T ^ A A A ^ VXB VX(A ^ B) 

A ^ (B X C) (A ^ B) X (A ^ C) A ^ T T if X does not appear free in A 

Fig. 4. Equational system for type isomorphisms in A/j2' and in system F 



Proof: As this new system is included in A[i2, our model is necessarily also 
a model of A[i2'. Thanks to the theorem 5, we only need to check that: if A 
and B are two types built on the grammar of A/,i2' such that A* and B* are 
isomorphic, then A B (and also that there exist terms in A/.i2' realizing 
the equations of ^^ ). □ 



Finally, we also recover the results of Roberto Di Cosmo ||DC950 



Corollary 2 Type isomorphisms for system F are given by the equational system 



Proof: System F is A/,i2' where we have suppressed the constructors [a]t 
and [j.a'^.t. The type system is the same as the one of AjU2', so we conclude 
by the same reasoning as above. □ 
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5 Conclusion and further directions 



Game semantics has allowed us not only to retrieve semantically the results 
of Robert Di Cosmo concerning type isomorphisms in system F, but also to 
give a characterization of type isomorphisms for an extension of this system 
to a calculus with control. 

However, although it has led us to a good characterization of type isomor- 
phisms, uniformity is still a very ad hoc property. We suspect that there is 
an analogy between uniformity and innocence: maybe this link could help 
us understanding uniformity better. 

Concerning extension, one can easily adapt our model to a calculus with 
a fixpoint operator: it only requires to enrich the structure of the model 
with an complete partial order on strategies (which will simply be the inclu- 
sion of strategies). Note that it is possible only because we did not require 
the totality of strategies in our model (as we were able to prove the to- 
tality of strategies realizing game isomorphisms). Moreover, our strategies 
are considered here as innocent, but in fact it would suffice to have them 
well-threaded and visible: in this case, our model would appear to be a 
good candidate to interpret second-order Idealized Algol llAM99l] and to 



characterize type isomorphisms in this system by a similar equational sys- 
tem. Many other programming features may also be treated using this kind 
of model, like non-determinism, probabilities, concurrency, . . . Taking the 
same approach for Curry-style system F or for ML should also be possible, 
but it will require to build a brand new model, because the model we give 
here does not suit these systems. 

Finally, our approach needs to be tested on retractions, i.e. in the case where 
we have / : A — > B and g : B — > A such that f ° g = ids but not necessary 
gof = id-A- Retractions canbe understood as a subtyping notion, and they are 
useful when dealing with code reuse (because, schematically, it is no big deal 
to use a function having a " more liberal" type than the one we expected). 
In this domain few results idLPS92l. IP^dOlt IRUO2I] are known, even in a 



propositional setting, so game semantics may give a new enlightenment on 
this problem. 
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A Soundness of the interpretation of A/i2 in a control hyperdoctrine 



Theorem 1 (soundness) The interpretation of second-order A^i-terms in a con- 
trol hyperdoctrine is sound: for any couple of terms t, u such that t = u, we have 

m = itii 

Proof: We prove successively the soundness of the interpretation for every 
reduction rule. Most of the required equalities are already valid (with the 
same proof) in a control category or in a hyperdoctrine. That is why, in 
many cases, we will only give a sketch of the proof: we do not detail the 
commutativity of the diagrams and the validity of substitution lemmas. 

(T) It suffices to recall that 1 ^7 A is isomorphic to 1, and 1 is a terminal object. 
(ti,) As d~^^ ^ = (711 A, 7i2 A), one has: 



-{AxB) A "'"^^ ^ A A 



"1 



(A A) X (B A) 

(x) This comes directly from d~^^ ^ = (711 ^7 A, 7Z2 ^7 A). 
(j6) Let us introduce the linear distributivity ld:Ax{B^i C) (A ^7 C) x 

(B ^7 C) ^ (A x B) ^7 C. 

The first step is to prove that the following diagram commutes: 



zvxid 



r- 



{id,id) 



-(B^ ^7 A) X (A ^7 A)^^(B^ X A) ^7 A 



rxr ""^"^ : fx (A ^7 A)- 



Id 



B^V 



■(r X A) ^7 A^^B ^7 A ^7 A 



withg = {Am);s-\m). 

Then, one has to prove the following substitution lemma (by induction 
on t): 

{id, id); id x [u]]; Id; ^7 A; id ^7 A = 
(rj) What we want to show is: 

Amini);d;e^j A);s-' = m 
And this precisely means: 



(B ^7 A)^ X A 

m;s)xid 

TxA 
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which is straightforward, 
(ju) For the substitution lemma to prove by induction on t is (modulo 
some trivial morphisms): 

id X luf, m X id; d;e^A = lt[[^]{-)u/[a]{-m 

The most significant case of the induction is the case where t = [a]t': it 
consists in this case in proving that (informally) V; (d;e^A) = (d;e^A);V: 
it can be done using curryfication and decurryfication (using the fact that 

is central for any morphism v). 

For (/i^), first remark that: 

{K-Hitip)w\B] = m)^::\u",B];K-\p)[u\B] 

Then the substitution lemma to prove by induction on t is (modulo some 
trivial morphisms): 

m;ic-Hp)[u'\B] = itm{-){B}/[a]{-m 

The most significant case of the induction is the case where t = [a]t': 
it consists in this case in proving that (informally) V;K~^{p)[W,B] = 
K-\p)[U",B] ^ K-\p)[U",B])V: this is ensured by focality of K-\p)[U",B] 
(which is due to the centrality of this morphism). 
The rules (fi^) and (/i^) can be treated similarly, 
(p) The three rules (p^), (p^) and (p-*-) work on the same scheme. If we look 
for example to (p''), one has: 

l[a']^a^.q = T ^ ±i^iA^iA^ A^iA ^ A A ^ A 4 ±j A 
= ma'/a]J 

(6) If we focus on (0f') for example, note that the derivations we want to 
compare are the following ones: 

W{o) 

q X,T\-t:A\a:A,a':A,A 

X,T\-t:A\a:A,A X,T \- [a]t : ± \ a : A,a' : A, A 

X,T\- ^a^.[a]t :A\a' :A,A 
where W{o) is obtained from cr by a weakening lemma. 
Hence, we have to compare 

T ^A^iA^iA 

with 

l^a'^.[a]q = T A^iiA^iA^iA) A (A^jA^jA)^j(A^jA^iA) ^ A^jA^jA 
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By induction on the proof o, one can show that actually I[W(01 = T — > 
A {A A) A A {A A A). Besides, as a ^ FN{t), one can also 

prove by induction on o that m = T ^ A^i A ^ A^iiA^i A) for some 
t'. 

Hence, we have two weakening composing with contractions that give 
us the identity, and p' ]] is composed with the last weakening to give us 

W- 

(j62) [[AX.fJjB} = so one only needs to prove a substitution lemma: 

m[u'\B] = mB/x]j 

which is ensured by the fact that specialization functors are strict functors 
of control categories (indeed, they are strict functors of pre-control cate- 
gories, and the strictness for other structural morphisms is automatically 
true). 

(r]2) This is immediate, since: 
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